WordPress plugin
Happy FAQs – FAQ, Product FAQ & Help Center security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium5
- Low0
All Happy FAQs – FAQ, Product FAQ & Help Center vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.4 | Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting ≤1.7.0Update to 1.7.1 | CVE-2024-5669 | |
| Medium4.3 | Missing Authorization to Authenticated (Subscriber+) Settings Update ≤1.7.0Update to 1.7.1 | CVE-2024-5704 | |
| Medium6.1 | WooCommerce Product FAQ <= 1.6.3 - Reflected Cross-Site Scripting ≤1.6.3Update to 1.6.4 | CVE-2024-37515 | |
| Medium4.3 | Missing Authorization via handle_optin_optout ≤4.1.2Update to 4.1.3 | CVE-2024-32110 | |
| Medium6.1 | Reflected Cross-Site Scripting via fs_request_get ≤1.9.2No patch available | CVE-2023-33999 |
- Medium6.4Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
≤1.7.0Update to 1.7.1
- Medium4.3Missing Authorization to Authenticated (Subscriber+) Settings Update
≤1.7.0Update to 1.7.1
- Medium6.1WooCommerce Product FAQ <= 1.6.3 - Reflected Cross-Site Scripting
≤1.6.3Update to 1.6.4
- Medium4.3Missing Authorization via handle_optin_optout
≤4.1.2Update to 4.1.3
- Medium6.1Reflected Cross-Site Scripting via fs_request_get
≤1.9.2No patch available
Happy FAQs – FAQ, Product FAQ & Help Center: common questions
Does Happy FAQs – FAQ, Product FAQ & Help Center have known vulnerabilities?
Yes. VulnCrest Radar lists 5 known vulnerabilities in Happy FAQs – FAQ, Product FAQ & Help Center: 5 medium. At least one is not fixed in the latest version.
How do I check which version of Happy FAQs – FAQ, Product FAQ & Help Center I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Happy FAQs – FAQ, Product FAQ & Help Center vulnerability?
CVE-2024-5669, published Jul 8, 2024: XPlainer – WooCommerce Product FAQ [WooCommerce Accordion FAQ Plugin] <= 1.7.0 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting. Severity: Medium (CVSS 6.4).
Is any Happy FAQs – FAQ, Product FAQ & Help Center vulnerability listed in CISA KEV?
No. None of the known Happy FAQs – FAQ, Product FAQ & Help Center vulnerabilities is currently listed in the CISA KEV catalog.