Xenioushk
6 CVEs across 4 Xenioushk products. Browse Xenioushk vulnerabilities, severities, and proof-of-concept exploits.
Xenioushk products with known CVEs
Xenioushk CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-4075 | Medium | 6.4 | 2026-03-26 | The BWL Advanced FAQ Manager Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'baf_sbox' shortcode in all versions up to and incl… |
CVE-2025-68992 | Medium | 6.5 | 2025-12-30 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in xenioushk BWL Knowledge Base Manager bwl-kb-manager allow… |
CVE-2025-68991 | Medium | 6.5 | 2025-12-30 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in xenioushk BWL Pro Voting Manager bwl-pro-voting-manager a… |
CVE-2025-68990 | High | 8.5 | 2025-12-30 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in xenioushk BWL Pro Voting Manager bwl-pro-voting-manager a… |
CVE-2024-13801 | High | 8.1 | 2025-03-26 | The BWL Advanced FAQ Manager plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capa… |
CVE-2024-32136 | High | 7.6 | 2024-04-15 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Xenioushk BWL Advanced FAQ Manager.This issue affects BWL… |