Skip to content
Sign in
Not rated

CVE-2021-24805 The DW Question & Answer Pro WordPress plugin through 1.3.4 does not properly check for CSRF in some of its functions,…

Description

The DW Question & Answer Pro WordPress plugin through 1.3.4 does not properly check for CSRF in some of its functions, allowing attackers to make logged in users perform unwanted actions, such as update a comment or a question status.

Affected products and versions

Product Affected versions Fixed in
DW Question Answer Pro 1.3.4 No fix stated

Other CVEs of DW Question Answer Pro

The 2 CVEs of DW Question Answer Pro →
CVE-2021-24800 The DW Question & Answer Pro WordPress plugin through 1.3.4 does not check that the comment to edit belongs to the… Not rated
Track this CVE