← WordPress Vulnerabilities
WordPress security by component

get_faqs() function in the FAQ Builder AYS

get_faqs() function in the FAQ Builder AYS is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Aug 02, 2021; the highest CVE/CNA score is 8.8.

Plugin slug: faq-builder

CVE-2021-24461: get_faqs() function in the FAQ Builder AYS: SQL injection

get_faqs() function in the FAQ Builder AYS is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.

PublishedAug 02, 2021
Safe version guidanceSee mitigation notes
Safe version
Aug 02, 2021 CVE-2021-24461
get_faqs() function in the FAQ Builder AYS: SQL injection
get_faqs() function in the FAQ Builder AYS is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
See mitigation notes
CVE8.8
NVD8.8