BWL Advanced FAQ Manager Lite
BWL Advanced FAQ Manager Lite has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for BWL Advanced FAQ Manager Lite has a vendor fix available, so running the current release closes it.
All of these findings were reported by Muhammad Yudha - DJ. BWL Advanced FAQ Manager Lite is installed on roughly 20 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.
CVE-2026-4075BWL Advanced FAQ Manager Lite <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sbox_id' Shortcode Attribute
Read the full analysisVulnerability Records

BWL Advanced FAQ Manager Lite
Author
Mahbub Alam Khan
Live Demo | Video Tutorials | User Guide | Pro Version Create a helpful and functional FAQ page within 5 minutes with the BWL Advanced FAQ Manager plugin. The advanced FAQ manager plugin comes with almost zero configuration requirements. Just upload and install the plugin, and you are ready to go. The plugin has a built-in Shortcode generator integrated with the TinyMCE editor and works with the Gutenberg editor. Insert shortcodes quickly and display FAQ items inside any page, post, or widget area. Features Unlimited FAQ posts & categories Live search option Search suggestion panel with result highlighter FAQ options panel 7 different FAQ themes Shortcode editor FAQ widgets FAQ posts rating Animated FAQ accordion Mobile friendly responsive layout Ready for localization Supports latest WordPress version Well documented Pro Version Features FAQ schema option Keep custom FAQ row opened Expand/Collapse Buttons Single search box for multiple categories Custom drag & drop sort of FAQ posts FAQ pagination FAQ display in tabbed layout External question submission form Bulk & quick edit options Premium 6 months free support from developer Get two premium addons for free Get The Pro Version
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C