Lucene search
PRIOn knowledge basePRION:CVE-2022-2198HistoryAug 22, 2022 - 3:15 p.m.
Authorization
2022-08-2215:15:00
PRIOn knowledge base
www.prio-n.com
5
The WPQA Builder WordPress plugin before 5.7 which is a companion plugin to the Hilmer and Discy , does not check authorization before displaying private messages, allowing any logged in user to read other users private message using the message id, which can easily be brute forced.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wpqa_builder | lt | 5.7 |
Related
cvelist
cvelist
CVE-2022-2198 WPQA < 5.7 - Subscriber+ Private Message Disclosure via IDOR
2022-08-22 15:00:17
nvd
nvd
CVE-2022-2198
2022-08-22 15:15:14
cve
cve
CVE-2022-2198
2022-08-22 15:15:14