Description
WordPress Plugin Ultimate FAQ is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently import CSV files and create new posts, or export all posts/FAQs. WordPress Plugin Ultimate FAQ version 1.8.24 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.8.25 or latest
References
Related Vulnerabilities
WordPress Plugin Push Notifications for WordPress (Lite) Cross-Site Request Forgery (6.0)
PHP Other Vulnerability (CVE-2007-5424)
WordPress Other Vulnerability (CVE-2006-6017)
WordPress Plugin CP Reservation Calendar SQL Injection (1.1.6)
WordPress Plugin Click to Copy Grab Box Multiple Cross-Site Scripting Vulnerabilities (0.1.1)