Dw Question & Answer Security Vulnerabilities and Issues — Dw Question & Answer CVE List

Lucene search

DesignwallDw Question & Answer

3 matches found

CVE•added 2022/04/25 4:16 p.m.•66 views

CVE-2021-24800

The DW Question & Answer Pro WordPress plugin through 1.3.4 does not check that the comment to edit belongs to the user making the request, allowing any user to edit other comments.

4.3CVSS4.5AI score0.00145EPSS

CVE•added 2022/04/25 4:16 p.m.•61 views

CVE-2021-24805

The DW Question & Answer Pro WordPress plugin through 1.3.4 does not properly check for CSRF in some of its functions, allowing attackers to make logged in users perform unwanted actions, such as update a comment or a question status.

4.3CVSS4.6AI score0.00097EPSS

CVE•added 2023/07/12 4:15 a.m.•39 views

CVE-2021-4408

The DW Question & Answer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5.8. This is due to missing or incorrect nonce validation on the update_answer() function. This makes it possible for unauthenticated attackers to update answers to question...

4.3CVSS4.3AI score0.00146EPSS