CVE-2021-24800CWE-639

DW Question & Answer Pro <= 1.3.4 - Arbitrary Comment Edition via IDOR

published April 25, 2022

CVSS
—
EPSS
1%
Percentile
50.7
In the wild
Unconfirmed
What it is

The DW Question & Answer Pro WordPress plugin through 1.3.4 does not check that the comment to edit belongs to the user making the request, allowing any user to edit other comments.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00654 · 50.7th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2022-04-25T15:50Z
EPSS history
Timeline
  • 25 APR 15:50Z
    DW Question & Answer Pro <= 1.3.4 - Arbitrary Comment Edition via IDOR
    cvelistv5