Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

xenioushk vulnerabilities

6 published CVEs name xenioushk among the affected products.

Newest CVEs

  • CVE-2026-4075

    BWL Advanced FAQ Manager Lite <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sbox_id' Shortcode Attribute

    xenioushk · BWL Advanced FAQ Manager Lite

    Medium6.4
  • CVE-2025-68992

    WordPress BWL Knowledge Base Manager plugin <= 1.6.3 - Cross Site Scripting (XSS) vulnerability

    xenioushk · BWL Knowledge Base Manager

    Medium6.5
  • CVE-2025-68991

    WordPress BWL Pro Voting Manager plugin <= 1.4.9 - Cross Site Scripting (XSS) vulnerability

    xenioushk · BWL Pro Voting Manager

    Medium6.5
  • CVE-2025-68990

    WordPress BWL Pro Voting Manager plugin <= 1.4.9 - SQL Injection vulnerability

    xenioushk · BWL Pro Voting Manager

    High8.5
  • CVE-2024-13801

    BWL Advanced FAQ Manager <= 2.1.4 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Options Update

    xenioushk · BWL Advanced FAQ Manager

    High8.1
  • CVE-2024-32136

    WordPress BWL Advanced FAQ Manager plugin <= 2.0.3 - Auth. SQL Injection vulnerability

    Xenioushk · BWL Advanced FAQ Manager

    High7.6