Vulnerabilities in xenioushk
6 resultsCVE-2024-32136HIGHWordPress BWL Advanced FAQ Manager plugin <= 2.0.3 - Auth. SQL Injection vulnerabilityEPSS 1.3%CVE-2024-13801HIGHBWL Advanced FAQ Manager <= 2.1.4 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Options UpdateEPSS 0.3%CVE-2025-68990HIGHWordPress BWL Pro Voting Manager plugin <= 1.4.9 - SQL Injection vulnerabilityEPSS 0.3%CVE-2026-4075MEDIUMBWL Advanced FAQ Manager Lite <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sbox_id' Shortcode AttributeEPSS 0.2%CVE-2025-68992MEDIUMWordPress BWL Knowledge Base Manager plugin <= 1.6.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-68991MEDIUMWordPress BWL Pro Voting Manager plugin <= 1.4.9 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%