Rustaurius Ultimate Faq vulnerabilities

• rustaurius ultimate faq WordPress Ultimate FAQ plugin <= 2.4.14 - Cross Site Scripting (XSS) vulnerability CVE-2026-94391 6.5 MediumSeptember 23, 2026
• rustaurius ultimate faq accordion plugin Ultimate FAQ Accordion Plugin <= 2.4.7 - Authenticated (Author+) Stored Cross-Site Scripting via FAQ Content CVE-2026-4336 6.4 MediumApril 9, 2026
• rustaurius ultimate faq WordPress Ultimate FAQ plugin <= 2.4.3 - Cross Site Request Forgery (CSRF) vulnerability CVE-2025-67590 4.3 MediumDecember 9, 2025