Vendor/product archive

designwall / dw_question_&_answer CVEs

Beta · best-effort

3 CVEs tagged to designwall / dw_question_&_answer — 0 Critical, 0 High, 3 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to designwall vendor archive

CVE-2021-4408

Published Jul 12, 2023

The DW Question & Answer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5.8. This is due to missing or incorrect nonce valida…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2021-24805

Published Apr 25, 2022

The DW Question & Answer Pro WordPress plugin through 1.3.4 does not properly check for CSRF in some of its functions, allowing attackers to make logged in users perform unwanted…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2021-24800

Published Apr 25, 2022

The DW Question & Answer Pro WordPress plugin through 1.3.4 does not check that the comment to edit belongs to the user making the request, allowing any user to edit other comment…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1