https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T07:08:40.128075+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-2198 CVE-2022-2198 — WPQA < 5.7 - Subscriber+ Private Message Disclosure via IDOR 2026-10-05T07:08:40.145581+00:00

Affected: Unknown WPQA Builder

The WPQA Builder WordPress plugin before 5.7 which is a companion plugin to the Hilmer and Discy , does not check authorization before displaying private messages, allowing any logged in user to read other users private message using the message id, which can easily be brute forced.