Vendors / Etoile Web Design Records 32 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 4
CVSS high 11
Exploited now Etoile Web Design records in CISA KEV No Etoile Web Design vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 40
Functions/EWD_UFAQ_Import.php in the ultimate-faqs plugin through 1.8.24 for WordPress allows unauthenticated options import.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.04212 · Published 2019-10-07 · No fix listed CWE-306
Priority LOW 32
The Ultimate FAQ plugin before 1.8.30 for WordPress allows XSS via Display_FAQ to Shortcodes/DisplayFAQs.php.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.02195 · Published 2020-01-16 · No fix listed CWE-79
Priority LOW 32
Functions/EWD_UFAQ_Import.php in the ultimate-faqs plugin through 1.8.24 for WordPress allows HTML content injection.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.02225 · Published 2019-10-07 · No fix listed CWE-79
Priority LOW 29
The ultimate-faqs plugin before 1.8.22 for WordPress has XSS.
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00932 · Published 2019-08-27 · No fix listed CWE-79
Priority LOW 26
The Ultimate FAQ WordPress plugin before 2.1.2 does not have capability and CSRF checks in the ewd_ufaq_welcome_add_faq and ewd_ufaq_welcome_add_faq_page AJAX actions, available to any authenticated users.
CVSS 3.1 MEDIUM 5.7· Network · Low privileges · User interaction · EPSS 0.00426 · Published 2022-01-24 · Fixed in 2.1.2 CWE-862
Open these records in search → All records by CVSS severity
4 11 17 0 0
THREATIST.IORead the docs