← Back

Etoilewebdesign

etoilewebdesign

26 CVEs • 6 products

Products (6)

Click to collapse
Toggle
Front End Users
front_end_users
10 CVEs
Ultimate Faq
ultimate_faq
5 CVEs
Ultimate Product Catalog
ultimate_product_catalog
4 CVEs
Ultimate Reviews
ultimate_reviews
3 CVEs
Order Tracking
order_tracking
3 CVEs
Ultimate Appointment Booking & Scheduling
ultimate_appointment_booking_&_scheduling
1 CVE

CVEs (26)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-7107
1Etoilewebdesign
1Ultimate Faq
Nov 21, 2024
Jan 16, 2020
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The Ultimate FAQ plugin before 1.8.30 for WordPress allows XSS via Display_FAQ to Shortcodes/DisplayFAQs.php.
CVE-2019-17233
1Etoilewebdesign
1Ultimate Faq
Nov 21, 2024
Oct 7, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Functions/EWD_UFAQ_Import.php in the ultimate-faqs plugin through 1.8.24 for WordPress allows HTML content injection.
CVE-2019-17232
1Etoilewebdesign
1Ultimate Faq
Nov 21, 2024
Oct 7, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Functions/EWD_UFAQ_Import.php in the ultimate-faqs plugin through 1.8.24 for WordPress allows unauthenticated options import.
CVE-2019-15643
1Etoilewebdesign
1Ultimate Faq
Nov 21, 2024
Aug 27, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The ultimate-faqs plugin before 1.8.22 for WordPress has XSS.
CVE-2017-12200
1Etoilewebdesign
1Ultimate Product Catalog
May 13, 2026
Aug 2, 2017
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The Etoile Ultimate Product Catalog plugin 4.2.11 for WordPress has XSS in the Add Product Manually component.
CVE-2017-12199
1Etoilewebdesign
1Ultimate Product Catalog
May 13, 2026
Aug 2, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The Etoile Ultimate Product Catalog plugin 4.2.11 for WordPress has SQL injection with these wp-admin/admin-ajax.php POST actions: catalogue_update_order list-item, video_update_order video-item, image_update_order list-...Show more
The Etoile Ultimate Product Catalog plugin 4.2.11 for WordPress has SQL injection with these wp-admin/admin-ajax.php POST actions: catalogue_update_order list-item, video_update_order video-item, image_update_order list-item, tag_group_update_order list_item, category_products_update_order category-product-item, custom_fields_update_order field-item, categories_update_order category-item, subcategories_update_order subcategory-item, and tags_update_order tag-list-item.Show less