Aller au contenu
Se connecter
Non notée

CVE-2021-24805 The DW Question & Answer Pro WordPress plugin through 1.3.4 does not properly check for CSRF in some of its functions,…

Description

The DW Question & Answer Pro WordPress plugin through 1.3.4 does not properly check for CSRF in some of its functions, allowing attackers to make logged in users perform unwanted actions, such as update a comment or a question status.

Produits et versions touchés

Produit Versions touchées Corrigé en
DW Question Answer Pro 1.3.4 Pas de correctif indiqué

Autres CVE de DW Question Answer Pro

Les 2 CVE de DW Question Answer Pro →
CVE-2021-24800 The DW Question & Answer Pro WordPress plugin through 1.3.4 does not check that the comment to edit belongs to the… Non notée
Suivre cette CVE