Lucene search
+L

1397 matches found

RedhatCVE
RedhatCVE
added 2025/09/24 6:31 p.m.6 views

CVE-2025-58659

Use of Hard-coded Credentials vulnerability in Essekia Helpie FAQ helpie-faq allows Retrieve Embedded Sensitive Data.This issue affects Helpie FAQ: from n/a through = 1.45...

5.3CVSS5.9AI score0.0029EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/09/24 6:31 p.m.8 views

CVE-2025-58200

Cross-Site Request Forgery CSRF vulnerability in Bage Flexible FAQ flexible-faq allows Cross Site Request Forgery.This issue affects Flexible FAQ: from n/a through = 0.2...

4.3CVSS5.9AI score0.0014EPSS
SaveExploits0References1
NVD
NVD
added 2025/09/22 7:16 p.m.7 views

CVE-2025-58659

Use of Hard-coded Credentials vulnerability in Essekia Helpie FAQ helpie-faq allows Retrieve Embedded Sensitive Data.This issue affects Helpie FAQ: from n/a through = 1.45...

5.3CVSS0.0029EPSS
SaveExploits0References1
NVD
NVD
added 2025/09/22 7:16 p.m.7 views

CVE-2025-58200

Cross-Site Request Forgery CSRF vulnerability in Bage Flexible FAQ flexible-faq allows Cross Site Request Forgery.This issue affects Flexible FAQ: from n/a through = 0.2...

4.3CVSS0.0014EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/09/22 6:55 p.m.10 views

WordPress Accordion FAQ Plugin <= 2.2.1 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Accordion FAQ versions = 2.2.1...

6.9AI score0.003EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/09/22 6:53 p.m.10 views

WordPress Flexible FAQ Plugin <= 0.2 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Nabil Irawan in WordPress Plugin Flexible FAQ versions = 0.2...

4.3CVSS6.6AI score0.0014EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/09/22 6:40 p.m.8 views

WordPress Helpie FAQ plugin <= 1.45 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Legion Hunter in WordPress Plugin Helpie FAQ versions = 1.45...

5.3CVSS6.8AI score0.0029EPSS
SaveExploits0Affected Software1
Vulnrichment
Vulnrichment
added 2025/09/22 6:23 p.m.3 views

CVE-2025-58200 WordPress Flexible FAQ Plugin <= 0.2 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Bage Flexible FAQ flexible-faq allows Cross Site Request Forgery.This issue affects Flexible FAQ: from n/a through = 0.2...

4.3CVSS5.9AI score0.0014EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/22 6:23 p.m.15 views

CVE-2025-58200

CVE-2025-58200 : CSRF vulnerability in the Flexible FAQ (WordPress plugin). Documented as affecting Flexible FAQ up to version 0.2; no public exploit details in the provided sources. The connected docs confirm a CSRF issue in this plugin, but remediation/version specifics beyond 0.2 are not provi...

4.3CVSS5.9AI score0.0014EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/09/22 6:23 p.m.18 views

CVE-2025-58200 WordPress Flexible FAQ Plugin <= 0.2 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Bage Flexible FAQ flexible-faq allows Cross Site Request Forgery.This issue affects Flexible FAQ: from n/a through = 0.2...

4.3CVSS0.0014EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/09/22 6:23 p.m.18 views

CVE-2025-58659 WordPress Helpie FAQ plugin <= 1.45 - Sensitive Data Exposure vulnerability

Use of Hard-coded Credentials vulnerability in Essekia Helpie FAQ helpie-faq allows Retrieve Embedded Sensitive Data.This issue affects Helpie FAQ: from n/a through = 1.45...

5.3CVSS0.0029EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/09/22 6:23 p.m.1 views

CVE-2025-58659 WordPress Helpie FAQ plugin <= 1.45 - Sensitive Data Exposure vulnerability

Use of Hard-coded Credentials vulnerability in Essekia Helpie FAQ helpie-faq allows Retrieve Embedded Sensitive Data.This issue affects Helpie FAQ: from n/a through = 1.45...

5.3CVSS5.9AI score0.0029EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/22 6:23 p.m.16 views

CVE-2025-58659

CVE-2025-58659 affects the WordPress plugin Helpie FAQ (FAQ/Docs/KB – Helpie) with an unauthenticated sensitive information exposure. Public details in connected data identify Helpie FAQ as the affected software, up to version 1.39, and indicate the issue is an unauthenticated exposure of embedde...

5.3CVSS5.9AI score0.0029EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/09/22 12:00 a.m.6 views

WordPress plugin Helpie FAQ 信任管理问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A vulnerability in...

5.3CVSS6.4AI score0.0029EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/09/22 12:00 a.m.7 views

PT-2025-38884

Name of the Vulnerable Software and Affected Versions Bage Flexible FAQ versions through 0.2 Description A Cross-Site Request Forgery CSRF issue exists in Bage Flexible FAQ. This allows for the execution of unwanted actions on behalf of an authenticated user. Recommendations At the moment, there ...

4.3CVSS6.5AI score0.0014EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/09/22 12:00 a.m.9 views

WordPress plugin Bage Flexible FAQ 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

4.3CVSS6.5AI score0.0014EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/09/22 12:00 a.m.7 views

PT-2025-38948

Name of the Vulnerable Software and Affected Versions Essekia Helpie FAQ versions through 1.39 Description A hard-coded credentials issue exists in Essekia Helpie FAQ, potentially allowing retrieval of embedded sensitive data. The issue affects the application's functionality related to...

5.3CVSS6.6AI score0.0029EPSS
SaveExploits0References3
CVE
CVE
added 2025/09/11 7:24 a.m.35 views

CVE-2025-8686

CVE-2025-8686 details from the provided documents: The WordPress plugin WP Easy FAQs (WP Easy FAQs) is vulnerable to Stored Cross-Site Scripting (Stored XSS) via the WP_EASY_FAQ shortcode due to insufficient input sanitization and output escaping on user-supplied attributes. The flaw affects all ...

6.4CVSS4.7AI score0.003EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2025/08/30 6:20 p.m.12 views

CVE-2025-57425

A Stored Cross-Site Scripting XSS vulnerability in SourceCodester FAQ Management System 1.0 allows an authenticated attacker to inject malicious JavaScript into the 'question' and 'answer' fields via the update-faq.php endpoint...

6.1CVSS5.4AI score0.00288EPSS
SaveExploits1References1
Patchstack
Patchstack
added 2025/08/28 10:20 p.m.13 views

WordPress Accordion FAQ plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Accordion FAQ versions = 2.2.1...

6.1AI score0.00146EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder