CVE-2019-17233

PoC —

CVSS 3.1

6.1 medium

EPSS

2%p78

Published

Oct 7, 2019 (Oct 7, 2019)

Modified

Jun 17, 2026

Description

Functions/EWD_UFAQ_Import.php in the ultimate-faqs plugin through 1.8.24 for WordPress allows HTML content injection.

Vendors: etoilewebdesign
Products: ultimate faq
Ecosystems: WordPress
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (1.8%)

In the news2 stories

WordPress Security Alert: New Linux Malware Exploiting Over Two Dozen CMS Flaws

The Hacker NewsJan 17, 12:32 UTC · Jan 17, 2023Malware CVE-2016-10972 CVE-2019-17232 CVE-2019-17233

47

New Linux malware targets WordPress sites by exploiting 30 bugs

Security AffairsDec 30, 21:36 UTC · Dec 30, 2022Malware CVE-2016-10972 CVE-2019-17232 CVE-2019-17233

47