2code WPQA Builder any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

10CVEs

WPQA < 5.9 - Follow/Unfollow via CSRF

Published 2022-11-21 · Modified

8.8EPSS 0.005

WPQA < 6.1.1 - Arbitrary Category and Tag Follow/Unfollow via CSRF

Published 2024-07-03 · Modified

8.8EPSS 0.004

WPQA < 5.4 - Reflected Cross-Site Scripting

Published 2022-06-06 · Modified

6.1EPSS 0.030

WPQA < 6.1.1 - Contributor+ Stored XSS

Published 2024-07-03 · Modified

5.9EPSS 0.003

WPQA < 5.2 - Subscriber+ Stored Cross-Site Scripting via Profile fields

Published 2022-05-16 · Modified

5.4EPSS 0.013

WPQA < 5.5 - Unauthenticated Private Message Disclosure

Published 2022-06-06 · Modified

5.3EPSS 0.054

WPQA < 5.2 - Subscriber+ Private Message Disclosure via IDOR

Published 2022-05-16 · Modified

4.3EPSS 0.008

WPQA < 5.7 - Subscriber+ Private Message Disclosure via IDOR

Published 2022-08-22 · Modified

4.3EPSS 0.007

WPQA < 5.2 - Subscriber+ Arbitrary Profile Picture Deletion via IDOR

Published 2022-05-16 · Modified

4.3EPSS 0.006

WPQA < 5.9.3 - Missing validation lead to functionality abuse

Published 2023-01-09 · Modified

3.5EPSS 0.005