CVE-2025-58659
Helpie FAQ — Accordion, Docs & Knowledge Base
Minimum safe version
1.46
Update to 1.46 or later to address 12 fixable vulnerabilities
Freemius SDK <= 2.4.2 - Missing Authorization Checks
CVE-2024-47647
WordPress Accordion & FAQ – Helpie WordPress Accordion FAQ Plugin Plugin < 1.9.13 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-1891
WordPress Accordion & FAQ – Helpie WordPress Accordion FAQ Plugin Plugin <= 1.9.6 is vulnerable to Cross Site Scripting (XSS)
Helpie FAQ <= 1.9.8 - Reflected Cross-Site Scripting
Freemius SDK <= 2.2.3 - Missing Authorization to Arbitrary Options Update
Freemius SDK <= 2.4.2 - Missing Authorization Checks
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
WordPress Accordion & FAQ – Helpie WordPress Accordion FAQ Plugin plugin <= 1.7.6 - Sensitive Information Disclosure vulnerability
WordPress Accordion & FAQ – Helpie WordPress Accordion FAQ Plugin plugin <= 1.7.6 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability