Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpexploitBrandon RoldanWPEX-ID:CD37CA81-D683-4955-BC97-60204CB9C346
HistoryMar 29, 2022 - 12:00 a.m.

DW Question & Answer Pro <= 1.3.4 - Arbitrary Comment Edition via IDOR

2022-03-2900:00:00
Brandon Roldan
41

0.001 Low

EPSS

Percentile

24.8%

JSON

The plugin does not check that the comment to edit belongs to the user making the request, allowing any user to edit other comments. Vendor was notified via Envato on September 28th, 2021, but did not properly fix the issue and was notified numerous times since.

As any authenticated user, post a comment and edit it while capturing the request made, then change the comment_id parameter to the comment to edit

Related

prion 1
cve 1
wpvulndb 1
cvelist 1
nvd 1
patchstack 1
prion
prion
Design/Logic Flaw
2022-04-25 16:16:00
cve
cve
CVE-2021-24800
2022-04-25 16:16:06
wpvulndb
wpvulndb
DW Question & Answer Pro <= 1.3.4 - Arbitrary Comment Edition via IDOR
2022-03-29 00:00:00
cvelist
cvelist
CVE-2021-24800 DW Question & Answer Pro <= 1.3.4 - Arbitrary Comment Edition via IDOR
2022-04-25 15:50:41
nvd
nvd
CVE-2021-24800
2022-04-25 16:16:06
patchstack
patchstack
WordPress DW Question & Answer Pro premium plugin <= 1.3.4 - Arbitrary Comment Edition via IDOR vulnerability
2022-03-29 00:00:00

0.001 Low

EPSS

Percentile

24.8%

JSON
Related for WPEX-ID:CD37CA81-D683-4955-BC97-60204CB9C346
prion1cve1wpvulndb1cvelist1nvd1patchstack1