| Package | Affected versions | Patched versions |
|---|---|---|
| dw question & answer | ≤ 1.3.4 |
The DW Question & Answer Pro WordPress plugin through 1.3.4 does not properly check for CSRF in some of its functions, allowing attackers to make logged in users perform unwanted actions, such as update a comment or a question status.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free