2code Wpqa Builder
10 CVEs affecting 2code Wpqa Builder. Latest disclosed: 2024-07-03. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-2376 | High | 8.8 | 2024-07-03 | The WPQA Builder WordPress plugin before 6.1.1 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted a… |
CVE-2022-3688 | High | 8.8 | 2022-11-21 | The WPQA Builder WordPress plugin before 5.9 does not have CSRF check when following and unfollowing users, which could allow attackers to make logged in users… |
CVE-2022-1597 | Medium | 6.1 | 2022-06-08 | The WPQA Builder WordPress plugin before 5.4, used as a companion for the Discy and Himer , does not sanitise and escape a parameter on its reset password form… |
CVE-2024-2375 | Medium | 5.4 | 2024-07-03 | The WPQA Builder WordPress plugin before 6.1.1 does not sanitise and escape some of its Slider settings, which could allow high privilege users such as contrib… |
CVE-2022-1051 | Medium | 5.4 | 2022-05-16 | The WPQA Builder Plugin WordPress plugin before 5.2, used as a companion plugin for the Discy and Himer , does not sanitise and escape the city, phone or profi… |
CVE-2022-1598 | Medium | 5.3 | 2022-06-08 | The WPQA Builder WordPress plugin before 5.5 which is a companion to the Discy and Himer , lacks authentication in a REST API endpoint, allowing unauthenticate… |
CVE-2022-2198 | Medium | 4.3 | 2022-08-22 | The WPQA Builder WordPress plugin before 5.7 which is a companion plugin to the Hilmer and Discy , does not check authorization before displaying private messa… |
CVE-2022-1425 | Medium | 4.3 | 2022-05-16 | The WPQA Builder Plugin WordPress plugin before 5.2, used as a companion plugin for the Discy and Himer , does not validate that the message_id of the wpqa_mes… |
CVE-2022-1349 | Medium | 4.3 | 2022-05-16 | The WPQA Builder Plugin WordPress plugin before 5.2, used as a companion plugin for the Discy and Himer , does not validate that the value passed to the image_… |
CVE-2022-3343 | Low | 3.5 | 2023-01-09 | The WPQA Builder WordPress plugin before 5.9.3 (which is a companion plugin used with Discy and Himer Discy WordPress themes) incorrectly tries to validate tha… |