Medium severity4.3NVD Advisory· Published Apr 25, 2022· Updated Jun 17, 2026

CVE-2021-24800

Description

The DW Question & Answer Pro WordPress plugin through 1.3.4 does not check that the comment to edit belongs to the user making the request, allowing any user to edit other comments.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Question Answercpe-rescue
Package: https://wordpress.org/plugins/question-answer
WordPress/DW Question & Answer Prollm-create
Range: <=1.3.4

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/cd37ca81-d683-4955-bc97-60204cb9c346nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000