ThemeHigh Vulnerabilities and Affected Products
Vulnerabilities associated with Advanced FAQ Manager.
Products
Clear product- Advanced FAQ Manager2 vulnerabilities
- Checkout Field Editor (Checkout Manager) for WooCommerce2 vulnerabilities
- Checkout Field Editor for WooCommerce (Pro)2 vulnerabilities
- Payment Gateway of Stripe for WooCommerce2 vulnerabilities
- Dynamic Pricing and Discount Rules1 vulnerability
- Email Customizer for WooCommerce1 vulnerability
- Email Customizer for WooCommerce | Drag and Drop Email Templates Builder1 vulnerability
- Job Manager & Career – Manage job board listings, and recruitments1 vulnerability
- Stripe Payment Gateway for WooCommerce1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2025-67556MEDIUM | WordPress Advanced FAQ Manager plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeHigh Advanced FAQ Manager advanced-faq-manager allows Stored XSS.This issue affects Advanced FAQ Manager: from n/a through <= 1.5.2. CWE-79Dec 9, 2025 | CVSS5.9v3.1 | EPSS0.205% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-67553MEDIUM | WordPress Advanced FAQ Manager plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeHigh Advanced FAQ Manager advanced-faq-manager allows DOM-Based XSS.This issue affects Advanced FAQ Manager: from n/a through <= 1.5.2. CWE-79Dec 9, 2025 | CVSS6.5v3.1 | EPSS0.191% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |