CVE-2021-24800

Published: Apr 25, 2022

Modified: Aug 3, 2024

PUBLISHED

Description

The DW Question & Answer Pro WordPress plugin through 1.3.4 does not check that the comment to edit belongs to the user making the request, allowing any user to edit other comments.

Vendor	Product	Versions
Unknown	DW Question Answer Pro	affected `1.3.4 - <= 1.3.4`

Weaknesses (CWE)

CWE-639

References

https://wpscan.com/vulnerability/cd37ca81-d683-4955-bc97-60204cb9c346

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2021-24800

Description

Affected Products

Weaknesses (CWE)

References