CVE-2021-24800

The CVE-2021-24800 entry concerns the WordPress plugin DW Question & Answer Pro (versions

CVE-2021-24805

DW Question & Answer Pro for WordPress, up to version 1.3.4, contains CSRF protection gaps in several functions, enabling logged-in users to perform actions such as updating comments or changing a question’s status. The CVE-2021-24805 entry confirms the flaw and its impact as described; no exploi...

CVE-2021-4408

The CVE-2021-4408 entry concerns the DW Question & Answer plugin for WordPress. A Cross-Site Request Forgery flaw exists in versions up to and including 1.5.8 due to missing or incorrect nonce validation in the update_answer() function, enabling unauthenticated attackers to update answers to ques...