Ultimate FAQ – WordPress FAQ and Accordion Plugin, CVE-2025-67590

CVE, Research URL: CVE-2025-67590
Home page URL: Security reports for Ultimate FAQ – WordPress FAQ and Accordion Plugin
Application: Ultimate FAQ – WordPress FAQ and Accordion Plugin
Published on: Dec 09, 2025
Research Description: Cross-Site Request Forgery (CSRF) vulnerability in Rustaurius Ultimate FAQ ultimate-faqs allows Cross Site Request Forgery.This issue affects Ultimate FAQ: from n/a through <= 2.4.3.
Affected versions: max 2.4.3.
Status: vulnerable

Ultimate FAQ &#8211; WordPress FAQ and Accordion Plugin, CVE-2025-67590