CVE-2022-1598

WPQA < 5.5 - Unauthenticated Private Message Disclosure

published June 6, 2022

CVSS
—
EPSS
5%
Percentile
92.6
In the wild
Unconfirmed
What it is

The WPQA Builder WordPress plugin before 5.5 which is a companion to the Discy and Himer , lacks authentication in a REST API endpoint, allowing unauthenticated users to discover private questions sent between users on the site.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05383 · 92.6th percentile
Published
2022-06-06T08:51Z
EPSS history
Timeline
  • 06 JUN 08:51Z
    WPQA < 5.5 - Unauthenticated Private Message Disclosure
    cvelistv5