Xenioushk

Products

Product	CVEs	Exploited	Latest
BWL Advanced FAQ Manager	2	–	Mar 26, 2025
BWL Pro Voting Manager	2	–	Dec 30, 2025
BWL Advanced FAQ Manager Lite	1	–	Mar 26, 2026
BWL Knowledge Base Manager	1	–	Dec 30, 2025

CVE-2026-4075 Medium 6.4 BWL Advanced FAQ Manager Lite <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sbox_id' Shortcode Attribute 0.2%
CVE-2025-68992 Medium 6.5 WordPress BWL Knowledge Base Manager plugin <= 1.6.3 - Cross Site Scripting (XSS) vulnerability 0.2%
CVE-2025-68991 Medium 6.5 WordPress BWL Pro Voting Manager plugin <= 1.4.9 - Cross Site Scripting (XSS) vulnerability 0.2%
CVE-2025-68990 High 8.5 WordPress BWL Pro Voting Manager plugin <= 1.4.9 - SQL Injection vulnerability 0.3%
CVE-2024-13801 High 8.1 BWL Advanced FAQ Manager <= 2.1.4 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Options Update 0.3%
CVE-2024-32136 High 7.6 WordPress BWL Advanced FAQ Manager plugin <= 2.0.3 - Auth. SQL Injection vulnerability 1.3%