← All advisories

Medium severity6.1NVD Advisory· Published Oct 7, 2019· Updated Jun 17, 2026

CVE-2019-17233

CVE-2019-17233

Description

Functions/EWD_UFAQ_Import.php in the ultimate-faqs plugin through 1.8.24 for WordPress allows HTML content injection.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Etoilewebdesign/Ultimate Faq
cpe:2.3:a:etoilewebdesign:ultimate_faq:*:*:*:*:*:wordpress:*:*
Range: <=1.8.24
WordPress/ultimate-faqsdescription
WordPress/Ultimate Faqsllm-fuzzy
Range: <=1.8.24
Package: https://wordpress.org/plugins/ultimate-faqs

Patches

Vulnerability mechanics

References

3

blog.nintechnet.com/unauthenticated-options-import-vulnerability-in-wordpress-ultimate-faq-plugin/nvdExploitThird Party Advisory
wpvulndb.com/vulnerabilities/9883nvdThird Party Advisory
wordpress.org/plugins/ultimate-faqs/nvdProductRelease Notes

News mentions

0

No linked articles in our index yet.