WordPress plugin
WPB Advanced FAQ security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium1
- Low0
All WPB Advanced FAQ vulnerabilities
Nothing in this view
No vulnerabilities match this filter. Show all.
WPB Advanced FAQ: common questions
Does WPB Advanced FAQ have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in WPB Advanced FAQ: 1 medium. At least one is not fixed in the latest version.
How do I check which version of WPB Advanced FAQ I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent WPB Advanced FAQ vulnerability?
CVE-2023-0370, published Feb 22, 2023: WPB Advanced FAQ <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode. Severity: Medium (CVSS 6.4).
Is any WPB Advanced FAQ vulnerability listed in CISA KEV?
No. None of the known WPB Advanced FAQ vulnerabilities is currently listed in the CISA KEV catalog.