Wpqa Builder (Unknown) - vulnerabilities (CVEs)

7 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2024-07-03. Vendor: Unknown.

CVEs of Wpqa Builder

• CVE-2024-2376 - CVSS 8.8 (high), 2024-07-03: The WPQA Builder WordPress plugin before 6.1.1 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted…
• CVE-2024-2375 - CVSS 5.9 (medium), 2024-07-03: The WPQA Builder WordPress plugin before 6.1.1 does not sanitise and escape some of its Slider settings, which could allow high privilege users such as…
• CVE-2022-3343 - CVSS 3.5 (low), 2023-01-09: The WPQA Builder WordPress plugin before 5.9.3 (which is a companion plugin used with Discy and Himer Discy WordPress themes) incorrectly tries to validate…
• CVE-2022-3688 - CVSS 8.8 (high), 2022-11-21: The WPQA Builder WordPress plugin before 5.9 does not have CSRF check when following and unfollowing users, which could allow attackers to make logged in…
• CVE-2022-2198 - CVSS 4.3 (medium), 2022-08-22: The WPQA Builder WordPress plugin before 5.7 which is a companion plugin to the Hilmer and Discy , does not check authorization before displaying private…
• CVE-2022-1598 - CVSS 5.3 (medium), 2022-06-08: The WPQA Builder WordPress plugin before 5.5 which is a companion to the Discy and Himer , lacks authentication in a REST API endpoint, allowing…
• CVE-2022-1597 - CVSS 6.1 (medium), 2022-06-08: The WPQA Builder WordPress plugin before 5.4, used as a companion for the Discy and Himer , does not sanitise and escape a parameter on its reset password…