Advisories · Technology

Rustaurius Ultimate FAQ.

Every CVE that names Rustaurius Ultimate FAQ among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-94391 CVE record

CVSS 6.5 Medium

WordPress Ultimate FAQ plugin <= 2.4.14 - Cross Site Scripting (XSS) vulnerability
- Rustaurius Ultimate FAQ
- Cross-site scripting (XSS)
Not analysed yet 23 Sept 2026
CVE-2025-67590 CVE record

CVSS 4.3 Medium

WordPress Ultimate FAQ plugin <= 2.4.3 - Cross Site Request Forgery (CSRF) vulnerability
- Rustaurius Ultimate FAQ
- Cross-site request forgery (CSRF)
Not analysed yet 9 Dec 2025