Advanced FAQ QA Creator by Category Security & Risk Analysis

wordpress.org/plugins/advanced-faq-creator-by-category

This simple FAQ plugin lets you create, organize and publish your FAQs (frequently asked questions) in a very simple way through your WordPress admin …

10 active installs v1.2 PHP 5.4+ WP 3.5+ Updated Jun 15, 2025
creatorfaqmakerqaquestions
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is Advanced FAQ QA Creator by Category Safe to Use in 2026?

Generally Safe

Score 100/100

Advanced FAQ QA Creator by Category has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 11mo ago
Risk Assessment

The "advanced-faq-creator-by-category" v1.2 plugin exhibits a mixed security posture. On the positive side, it demonstrates strong adherence to secure coding practices with a very high percentage of properly escaped output and a complete absence of raw SQL queries. The plugin also boasts a clean vulnerability history, with no known CVEs recorded. However, a significant concern lies in its attack surface. A substantial number of AJAX handlers lack proper authentication checks, creating a potential entry point for malicious actors. The taint analysis further highlights this risk, revealing flows with unsanitized paths that could be exploited if combined with the unprotected AJAX endpoints.

Key Concerns

  • AJAX handlers without authentication checks
  • Taint flows with unsanitized paths
  • Use of unserialize function
Vulnerabilities
None known

Advanced FAQ QA Creator by Category Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Advanced FAQ QA Creator by Category Release Timeline

v6.1
v1.2Current
Code Analysis
Analyzed Apr 16, 2026

Advanced FAQ QA Creator by Category Code Analysis

Dangerous Functions
4
Raw SQL Queries
0
5 prepared
Unescaped Output
25
2933 escaped
Nonce Checks
4
Capability Checks
1
File Operations
0
External Requests
0
Bundled Libraries
1

Dangerous Functions Found

unserialize$data = unserialize($_COOKIE['faq_q'], ["allowed_classes" => false]);inc/like-dislike.php:69
unserialize$data['faqs_style'] = $this->esc_attr_text_or_array_field(unserialize($term_meta['faqs_array']['0'])inc/shortCode.php:29
unserialize$data['faqs_style'] = unserialize($term_meta['faqs_array']['0']);inc/shortCode.php:41
unserialize$data['faqs_style'] = unserialize($term_meta['faqs_array']['0']);inc/shortCode.php:82

Bundled Libraries

Select2

SQL Query Safety

100% prepared5 total queries

Output Escaping

99% escaped2958 total outputs
Data Flows · Security
5 unsanitized

Data Flow Analysis

9 flows5 with unsanitized paths
get_short_code_cat (inc/get-shortcode-cat.php:17)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface
6 unprotected

Advanced FAQ QA Creator by Category Attack Surface

Entry Points8
Unprotected6

AJAX Handlers 6

authwp_ajax_faq_autocomplete_searchinc/autocomplete-search.php:13
noprivwp_ajax_faq_autocomplete_searchinc/autocomplete-search.php:14
noprivwp_ajax_get_short_code_catinc/get-shortcode-cat.php:10
authwp_ajax_get_short_code_catinc/get-shortcode-cat.php:11
authwp_ajax_faq_save_ratinc/like-dislike.php:13
noprivwp_ajax_faq_save_ratinc/like-dislike.php:14

Shortcodes 2

[faq_by_category] inc/get-shortcode-cat.php:12
[faqs] inc/shortCode.php:9
WordPress Hooks 87
actioninitfaq.php:20
actionrestrict_manage_postsfaq.php:112
actionadmin_headfaq.php:119
filterthe_titlefaq.php:170
actionwp_footerfaq.php:204
actionfaqscategory_add_form_fieldsinc/TaxonomiesImage.php:11
actioncreate_faqscategoryinc/TaxonomiesImage.php:12
actionfaqscategory_edit_form_fieldsinc/TaxonomiesImage.php:13
actionedited_faqscategoryinc/TaxonomiesImage.php:14
actionadmin_enqueue_scriptsinc/TaxonomiesImage.php:15
actionadmin_footerinc/TaxonomiesImage.php:16
actionadmin_enqueue_scriptsinc/assets.php:14
actionadmin_enqueue_scriptsinc/assets.php:16
actionwp_headinc/assets.php:18
actionwp_enqueue_scriptsinc/autocomplete-search.php:12
actionfaqscategory_add_form_fieldsinc/category-font-awesome.php:15
actionfaqscategory_edit_form_fieldsinc/category-font-awesome.php:16
actionedited_faqscategoryinc/category-font-awesome.php:17
actioncreate_faqscategoryinc/category-font-awesome.php:18
actionadmin_enqueue_scriptsinc/category-font-awesome.php:19
actionadmin_enqueue_scriptsinc/category-font-awesome.php:20
actionadmin_footerinc/category-font-awesome.php:29
actionadmin_footerinc/category-font-awesome.php:76
actionfaqs_add_form_fieldsinc/category-options.php:15
actionfaqs_edit_form_fieldsinc/category-options.php:16
actionfaqs_add_form_fieldsinc/css_custom-options.php:15
actionfaqs_edit_form_fieldsinc/css_custom-options.php:16
actioninitinc/customPost.php:10
actionadmin_headinc/customPost.php:11
actioninitinc/customTaxonomies.php:7
actioninitinc/customTaxonomies.php:8
actioninitinc/customTaxonomies.php:9
filtermanage_edit-faqs_columnsinc/customTaxonomies.php:10
filtermanage_edit-faqscategory_columnsinc/customTaxonomies.php:11
filtermanage_edit-faqscategory_columnsinc/customTaxonomies.php:12
actionadmin_footerinc/customTaxonomies.php:13
actionadmin_headinc/customTaxonomies.php:14
actionmanage_faqs_custom_columninc/customTaxonomies.php:15
filterfaqs_row_actionsinc/customTaxonomies.php:16
filterfaqscategory_row_actionsinc/customTaxonomies.php:17
actionadmin_menuinc/dashboard-and-admin-menu.php:6
actionadmin_initinc/dashboard-and-admin-menu.php:7
actionin_admin_footerinc/dashboard-and-admin-menu.php:8
actionfaqs_add_form_fieldsinc/general-options.php:12
actionfaqs_edit_form_fieldsinc/general-options.php:13
actionedited_faqsinc/general-options.php:14
actioncreate_faqsinc/general-options.php:15
actionadmin_footerinc/general-options.php:23
actionadmin_footerinc/general-options.php:24
actionfaqs_edit_form_fieldsinc/getShortCode.php:16
actionadmin_footerinc/getShortCode.php:22
actionfaqs_add_form_fieldsinc/like-dislike-options.php:15
actionfaqs_edit_form_fieldsinc/like-dislike-options.php:16
actioninitinc/like-dislike.php:9
filterfaq_after_question_contentinc/like-dislike.php:10
actionwp_enqueue_scriptsinc/like-dislike.php:11
actionfaqs_add_form_fieldsinc/modall.php:15
actionfaqs_edit_form_fieldsinc/modall.php:16
actionadmin_enqueue_scriptsinc/modall.php:17
actionadmin_footerinc/modall.php:23
actionadmin_footerinc/modall.php:24
actionfaqs_add_form_fieldsinc/preview.php:13
actionfaqs_edit_form_fieldsinc/preview.php:14
actionload-post.phpinc/pubicSittingQuestion.php:11
actionload-post-new.phpinc/pubicSittingQuestion.php:12
actionadd_meta_boxesinc/pubicSittingQuestion.php:20
actionsave_postinc/pubicSittingQuestion.php:21
actionadmin_enqueue_scriptsinc/pubicSittingQuestion.php:22
actionadmin_enqueue_scriptsinc/pubicSittingQuestion.php:23
actionadmin_footerinc/pubicSittingQuestion.php:45
actionfaqs_add_form_fieldsinc/question-options.php:12
actionfaqs_edit_form_fieldsinc/question-options.php:13
actionfaqs_add_form_fieldsinc/search-options.php:15
actionfaqs_edit_form_fieldsinc/search-options.php:16
actionfaqs_add_form_fieldsinc/selectSlide.php:33
actionfaqs_edit_form_fieldsinc/selectSlide.php:34
actionedited_faqsinc/selectSlide.php:35
actioncreate_faqsinc/selectSlide.php:36
actionadmin_footerinc/selectSlide.php:44
actionadmin_footerinc/selectSlide.php:45
actionwp_footerinc/shortCode.php:10
actionwp_footertemplates/AFAQCBC_collapse_2_col/AFAQCBC_collapse_2_col.php:4
actionwp_footertemplates/AFAQCBC_collapse_2_col/AFAQCBC_collapse_2_col.php:5
actionwp_footertemplates/AFAQCBC_collapse_full/AFAQCBC_collapse_full.php:4
actionwp_footertemplates/AFAQCBC_collapse_full/AFAQCBC_collapse_full.php:5
actionwp_footertemplates/AFAQCBC_normal_links/AFAQCBC_normal_links.php:4
actionwp_footertemplates/AFAQCBC_normal_links/AFAQCBC_normal_links.php:5
Maintenance & Trust

Advanced FAQ QA Creator by Category Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedJun 15, 2025
PHP min version5.4
Downloads2K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

Advanced FAQ QA Creator by Category Developer Profile

wp-buy

15 plugins · 345K total installs

73
trust score
Avg Security Score
92/100
Avg Patch Time
879 days
View full developer profile
Detection Fingerprints

How We Detect Advanced FAQ QA Creator by Category

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/advanced-faq-creator-by-category/assets/js/admin_menu.js
Script Paths
/wp-content/plugins/advanced-faq-creator-by-category/assets/js/admin_menu.js

HTML / DOM Fingerprints

JS Globals
AFAQCBC_getCook
Shortcode Output
[faq_by_category]
FAQ

Frequently Asked Questions about Advanced FAQ QA Creator by Category