Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:dw_question_answer_pro:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductDw Question Answer Pro (c0e6e3af-92b4-5d78-b6f7-78b49dd714be)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-24805 vulnerable 2026-06-08 05:30:39.275782 DW Question & Answer Pro <= 1.3.4 - Multiple CSRF
The DW Question & Answer Pro WordPress plugin through 1.3.4 does not properly check for CSRF in some of its functions, allowing attackers to make logged in users perform unwanted actions, such as update a comment or a question status.
Published: 2022-04-25T15:50:43.000Z
Updated: 2024-08-03T19:42:17.212Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-24800 vulnerable 2026-06-08 05:30:39.262064 DW Question & Answer Pro <= 1.3.4 - Arbitrary Comment Edition via IDOR
The DW Question & Answer Pro WordPress plugin through 1.3.4 does not check that the comment to edit belongs to the user making the request, allowing any user to edit other comments.
Published: 2022-04-25T15:50:41.000Z
Updated: 2024-08-03T19:42:17.205Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.