EUVD-2021-11717

Malware in sbrugna...

CVE-2021-24800

The DW Question & Answer Pro WordPress plugin through 1.3.4 does not check that the comment to edit belongs to the user making the request, allowing any user to edit other comments...

CVE-2021-24805

The DW Question & Answer Pro WordPress plugin through 1.3.4 does not properly check for CSRF in some of its functions, allowing attackers to make logged in users perform unwanted actions, such as update a comment or a question status...

CVE-2021-24800 DW Question & Answer Pro <= 1.3.4 - Arbitrary Comment Edition via IDOR

The DW Question & Answer Pro WordPress plugin through 1.3.4 does not check that the comment to edit belongs to the user making the request, allowing any user to edit other comments...

CVE-2021-24805: Cross-Site Request Forgery (CSRF)

The DW Question & Answer Pro WordPress plugin through 1.3.4 does not properly check for CSRF in some of its functions, allowing attackers to make logged in users perform unwanted actions, such as update a comment or a question status...

PT-2022-9466

Name of the Vulnerable Software and Affected Versions DW Question & Answer Pro WordPress plugin versions 1.3.4 and earlier Description The issue allows any user to edit other comments because it does not check if the comment to edit belongs to the user making the request. Recommendations For DW...

CVE-2021-24800: Authorization Bypass Through User-Controlled Key

The DW Question & Answer Pro WordPress plugin through 1.3.4 does not check that the comment to edit belongs to the user making the request, allowing any user to edit other comments...

PT-2022-9468

Name of the Vulnerable Software and Affected Versions DW Question & Answer Pro WordPress plugin versions 1.3.4 and earlier Description The issue allows attackers to make logged-in users perform unwanted actions due to insufficient CSRF checks in some functions. This can lead to updates of comment...

WordPress DW Question & Answer Pro premium plugin <= 1.3.4 - Arbitrary Comment Edition via IDOR vulnerability

Arbitrary Comment Edition via IDOR vulnerability discovered by Brandon Roldan in WordPress DW Question & Answer Pro premium plugin versions = 1.3.4. Solution No patched version is available...