Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: xenioushk Clear all filters
TI-2026-03530 CVE-2026-4075 · GHSA-2vv2-mqg3-3j3p

Cross-site scripting in xenioushk BWL Advanced FAQ Manager Lite

Priority LOW 28

The BWL Advanced FAQ Manager Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'baf_sbox' shortcode in all versions up to and including 1.1.1.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00207 Published 2026-03-26 No fix listed CWE-79
TI-2025-42448 CVE-2025-68992 · GHSA-wmpp-wmx8-8xhj

WordPress BWL Knowledge Base Manager plugin <= 1.6.3 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in xenioushk BWL Knowledge Base Manager bwl-kb-manager allows Stored XSS.This issue affects BWL Knowledge Base Manager: f…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0019 Published 2025-12-30 No fix listed CWE-79
TI-2025-42447 CVE-2025-68991 · GHSA-mp6v-2px7-938v

WordPress BWL Pro Voting Manager plugin <= 1.4.9 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in xenioushk BWL Pro Voting Manager bwl-pro-voting-manager allows DOM-Based XSS.This issue affects BWL Pro Voting Manager…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0019 Published 2025-12-30 No fix listed CWE-79
TI-2025-42446 CVE-2025-68990 · GHSA-24x8-vf4r-m3v5

WordPress BWL Pro Voting Manager plugin <= 1.4.9 - SQL Injection vulnerability

Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in xenioushk BWL Pro Voting Manager bwl-pro-voting-manager allows Blind SQL Injection.This issue affects BWL Pro Voting M…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.003 Published 2025-12-30 No fix listed CWE-89
TI-2024-12827 CVE-2024-13801 · GHSA-mg9h-6jx9-8xmh

Missing authorization in xenioushk BWL Advanced FAQ Manager

Priority LOW 35

The BWL Advanced FAQ Manager plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the 'baf_set_notice_status' AJAX action in al…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00328 Published 2025-03-26 No fix listed CWE-862