Xenioushk vulnerabilities
We track 3 vulnerabilities in Xenioushk products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on December 30, 2025.
Latest Xenioushk vulnerabilities
- 8.5 High severity
BWL Pro Voting Manager: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in xenioushk BWL Pro Voting Manager bwl-pro-voting-manager allows Blind SQL Injection.This issue affects BWL Pro Voting Manager: from n/a through <= 1.4.9.
- 8.1 High severity
BWL Advanced FAQ Manager: Missing Authorization
The BWL Advanced FAQ Manager plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the 'baf_set_notice_status' AJAX action in all versions up to, and including, 2.1.4.
- 7.6 High severity
BWL Advanced FAQ Manager: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Xenioushk BWL Advanced FAQ Manager.This issue affects BWL Advanced FAQ Manager: from n/a through 2.0.3.