Filtered by vendor Rustaurius Subscriptions
Filtered by product Ultimate Faq Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-94391 2 Rustaurius, Wordpress 2 Ultimate Faq, Wordpress 2026-09-24 6.5 Medium
Contributor Cross Site Scripting (XSS) in Ultimate FAQ <= 2.4.14 versions.
CVE-2025-67590 2 Rustaurius, Wordpress 2 Ultimate Faq, Wordpress 2026-04-23 4.3 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Rustaurius Ultimate FAQ ultimate-faqs allows Cross Site Request Forgery.This issue affects Ultimate FAQ: from n/a through <= 2.4.3.