3.5
Faible
CVE-2022-3343 The WPQA Builder WordPress plugin before 5.9.3 (which is a companion plugin used with Discy and Himer Discy WordPress…
Description
The WPQA Builder WordPress plugin before 5.9.3 (which is a companion plugin used with Discy and Himer Discy WordPress themes) incorrectly tries to validate that a user already follows another in the wpqa_following_you_ajax action, allowing a user to inflate their score on the site by having another user send repeated follow actions to them.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WPQA Builder 5.9 | premières → < 5.9.3 | 5.9.3 |
| Discy 5.5 | premières → < 5.5.3 | 5.5.3 |
| Himer 1.9 | premières → < 1.9.3 | 1.9.3 |
Autres CVE de WPQA Builder
Les 7 CVE de WPQA Builder →
CVE-2024-2375
The WPQA Builder WordPress plugin before 6.1.1 does not sanitise and escape some of its Slider settings, which could…
5.9
Moyenne
CVE-2024-2376
The WPQA Builder WordPress plugin before 6.1.1 does not have CSRF checks in some places, which could allow attackers…
8.8
Élevée
CVE-2022-3688
The WPQA Builder WordPress plugin before 5.9 does not have CSRF check when following and unfollowing users, which…
8.8
Élevée
CVE-2022-2198
The WPQA Builder WordPress plugin before 5.7 which is a companion plugin to the Hilmer and Discy , does not check…
Non notée