Vendor archive

designwall CVEs

Beta · best-effort

4 CVEs tagged to vendor designwall — 0 Critical, 0 High, 4 Medium, 0 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2021-4408

Published Jul 12, 2023

The DW Question & Answer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5.8. This is due to missing or incorrect nonce valida…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2022-2423

Published Aug 8, 2022

The DW Promobar WordPress plugin through 1.0.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site…

CVSS 4.8 · Medium

Vendor/product tagsBeta · best-effort

CVE-2021-24805

Published Apr 25, 2022

The DW Question & Answer Pro WordPress plugin through 1.3.4 does not properly check for CSRF in some of its functions, allowing attackers to make logged in users perform unwanted…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2021-24800

Published Apr 25, 2022

The DW Question & Answer Pro WordPress plugin through 1.3.4 does not check that the comment to edit belongs to the user making the request, allowing any user to edit other comment…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1