medium4.3
CVE-2021-24800
The DW Question & Answer Pro WordPress plugin through 1.3.4 does not check that the comment to edit belongs to the user making the request, allowing any user t…
Impact
The DW Question & Answer Pro WordPress plugin through 1.3.4 does not check that the comment to edit belongs to the user making the request, allowing any user to edit other comments.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Designwall | Dw Question \& Answer | through 1.3.4 |