Medium severity5.3NVD Advisory· Published Jun 8, 2022· Updated Jun 17, 2026

CVE-2022-1598

Description

The WPQA Builder WordPress plugin before 5.5 which is a companion to the Discy and Himer , lacks authentication in a REST API endpoint, allowing unauthenticated users to discover private questions sent between users on the site.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Wpqa Buildercpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <5.5
Package: https://wordpress.org/plugins/wpqa-builder

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/0416ae2f-5670-4080-a88d-3484bb19d8c8nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.004
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000