CVE-2022-1598
EUVD-2022-2488708.06.2022, 10:15
The WPQA Builder WordPress plugin before 5.5 which is a companion to the Discy and Himer , lacks authentication in a REST API endpoint, allowing unauthenticated users to discover private questions sent between users on the site.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| 2code | wpqa_builder | 𝑥 < 5.4 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration