Skip to content
OpenAdvisories
Unscored CVE-2021-24800 EUVD-2021-11712GHSA-q6xh-rw6q-pcc2

DW Question & Answer Pro <= 1.3.4 - Arbitrary Comment Edition via IDOR

Published Apr 25, 2022 · Updated Aug 3, 2024 · Assigned by WPScan

Description

The DW Question & Answer Pro WordPress plugin through 1.3.4 does not check that the comment to edit belongs to the user making the request, allowing any user to edit other comments.

Affected products

VendorProductAffectedFixed
— DW Question Answer Pro 1.3.4 – ≤ 1.3.4 —

References