CVE-2021-24805CWE-352

DW Question & Answer Pro <= 1.3.4 - Multiple CSRF

published April 25, 2022

CVSS
—
EPSS
0%
Percentile
36.8
In the wild
Unconfirmed
What it is

The DW Question & Answer Pro WordPress plugin through 1.3.4 does not properly check for CSRF in some of its functions, allowing attackers to make logged in users perform unwanted actions, such as update a comment or a question status.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00435 · 36.8th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2022-04-25T15:50Z
EPSS history
Timeline
  • 25 APR 15:50Z
    DW Question & Answer Pro <= 1.3.4 - Multiple CSRF
    cvelistv5