Plugin icon

WPQA Builder

wpqa

Vulnerabilities:

10

Last Updated:

March 2, 2024

Active Installs:

n/a

Published
Title
Fixed in
CVSS
Published
2024-06-12
Title
WPQA < 6.1.1 - Contributor+ Stored XSS
Fixed in
Fixed in 6.1.1
CVSS
6.8 (medium)
Published
2024-06-12
Title
WPQA < 6.1.1 - Arbitrary Category and Tag Follow/Unfollow via CSRF
Fixed in
Fixed in 6.1.1
CVSS
4.3 (medium)
Published
2022-12-13
Title
WPQA < 5.9.3 - Missing validation lead to functionality abuse
Fixed in
Fixed in 5.9.3
CVSS
3.5 (low)
Published
2022-10-25
Title
WPQA < 5.9 - Follow/Unfollow via CSRF
Fixed in
Fixed in 5.9
CVSS
4.3 (medium)
Published
2022-08-01
Title
WPQA < 5.7 - Subscriber+ Private Message Disclosure via IDOR
Fixed in
Fixed in 5.7
CVSS
4.3 (medium)
Published
2022-05-16
Title
WPQA < 5.5 - Unauthenticated Private Message Disclosure
Fixed in
Fixed in 5.5
CVSS
5.3 (medium)
Published
2022-05-10
Title
WPQA < 5.4 - Reflected Cross-Site Scripting
Fixed in
Fixed in 5.4
CVSS
4.7 (medium)
Published
2022-04-21
Title
WPQA < 5.2 - Subscriber+ Private Message Disclosure via IDOR
Fixed in
Fixed in 5.2
CVSS
4.3 (medium)
Published
2022-04-21
Title
WPQA < 5.2 - Subscriber+ Stored Cross-Site Scripting via Profile fields
Fixed in
Fixed in 5.2
CVSS
5.4 (medium)
Published
2022-04-21
Title
WPQA < 5.2 - Subscriber+ Arbitrary Profile Picture Deletion via IDOR
Fixed in
Fixed in 5.2
CVSS
4.3 (medium)