2code / Wpqa Builder
10 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2024-2376 | WPQA < 6.1.1 - Arbitrary Category and Tag Follow/Unfollow via CSRF | HIGH | 8.8 | Jul 3, 2024 |
| CVE-2024-2375 | WPQA < 6.1.1 - Contributor+ Stored XSS | MEDIUM | 5.9 | Jul 3, 2024 |
| CVE-2022-3343 | WPQA < 5.9.3 - Missing validation lead to functionality abuse | LOW | 3.5 | Jan 9, 2023 |
| CVE-2022-3688 | WPQA < 5.9 - Follow/Unfollow via CSRF | HIGH | 8.8 | Nov 21, 2022 |
| CVE-2022-2198 | WPQA < 5.7 - Subscriber+ Private Message Disclosure via IDOR | MEDIUM | 4.3 | Aug 22, 2022 |
| CVE-2022-1598 | WPQA < 5.5 - Unauthenticated Private Message Disclosure | MEDIUM | 5.3 | Jun 6, 2022 |
| CVE-2022-1597 | WPQA < 5.4 - Reflected Cross-Site Scripting | MEDIUM | 6.1 | Jun 6, 2022 |
| CVE-2022-1425 | WPQA < 5.2 - Subscriber+ Private Message Disclosure via IDOR | MEDIUM | 4.3 | May 16, 2022 |
| CVE-2022-1349 | WPQA < 5.2 - Subscriber+ Arbitrary Profile Picture Deletion via IDOR | MEDIUM | 4.3 | May 16, 2022 |
| CVE-2022-1051 | WPQA < 5.2 - Subscriber+ Stored Cross-Site Scripting via Profile fields | MEDIUM | 5.4 | May 16, 2022 |
Showing 1 to 10 of 10 CVEs