PT-2024-20055

Name of the Vulnerable Software and Affected Versions WPQA Builder WordPress plugin versions prior to 6.1.1 Description The issue concerns the WPQA Builder WordPress plugin, where some of its Slider settings are not properly sanitised and escaped. This could allow high-privilege users, such as...

CVE-2022-3688: Undefined Security Weakness

The WPQA Builder WordPress plugin before 5.9 does not have CSRF check when following and unfollowing users, which could allow attackers to make logged in users perform such actions via CSRF attacks...

CVE-2022-1597: Improper Neutralization of Input During Web Page Generation

The WPQA Builder WordPress plugin before 5.4, used as a companion for the Discy and Himer , does not sanitise and escape a parameter on its reset password form which makes it possible to perform Reflected Cross-Site Scripting attacks...