Skip to content
OpenAdvisories

Vendor

designwall

1 known vulnerabilities.

Products

DW Question & Answer 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2021-4408

    DW Question & Answer <= 1.5.8 - Cross-Site Request Forgery Bypass

    The DW Question & Answer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5.8. This is due to missing or incorrect nonce validation on the update_answer() function. This makes it possible for unauthenticated…

    designwall DW Question & Answer Web / CMS