CVE-2022-1598

MEDIUM 5.3CVE-2022-1598 · Published 08/06/2022 · updated 17/06/2026

In short

CVE-2022-1598 is a MEDIUM (CVSS 5.3) vulnerability affecting wpqa builder (2code).
Chance of exploitation in the next 30 days (EPSS): 5.4%, higher than 92.7% of all vulnerabilities.
Fix: update to 5.4 or later.

Package	Affected versions	Patched versions
wpqa builder 2code	`< 5.4`	`5.4`

Description

The WPQA Builder WordPress plugin before 5.5 which is a companion to the Discy and Himer , lacks authentication in a REST API endpoint, allowing unauthenticated users to discover private questions sent between users on the site.

References

wpscan.com/vulnerability/0416ae2f-5670-4080-a88d-3484bb19d8c8 · Exploit

More vulnerabilities in wpqa builder

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

wpqa builder

2code

< 5.4

5.4

More vulnerabilities in wpqa builder

See all →