Cross-Site Request Forgery Vulnerability in Ultimate FAQ by Rustaurius

CVE-2025-67590

What is CVE-2025-67590?

The Ultimate FAQ plugin by Rustaurius is vulnerable to a Cross-Site Request Forgery (CSRF) attack. This vulnerability allows attackers to send unauthorized commands to the plugin's functionality by tricking authenticated users into performing actions without their consent. The affected versions of the plugin are those that are unpatched and include on or prior to version 2.4.3. Websites using this plugin risk unauthorized access and manipulation of data, leading to potential service disruption and data compromise.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References