Approved changes feed: RSS · Atom

cpe:2.3:a:2code:wpqa_builder:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor2Code (43a1989d-2be3-5fea-84c8-23a49da2dd0b)
ProductWpqa Builder (df8c1cd1-3792-5d91-b219-0b7b8b8e43a3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-2376 vulnerable 2026-06-08 06:33:30.961232 WPQA < 6.1.1 - Arbitrary Category and Tag Follow/Unfollow via CSRF
The WPQA Builder WordPress plugin before 6.1.1 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks
Published: 2024-07-03T06:00:04.339Z
Updated: 2024-08-01T19:11:53.485Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2375 vulnerable 2026-06-08 06:33:30.959280 WPQA < 6.1.1 - Contributor+ Stored XSS
The WPQA Builder WordPress plugin before 6.1.1 does not sanitise and escape some of its Slider settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks
Published: 2024-07-03T06:00:04.122Z
Updated: 2024-08-01T19:11:53.432Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.