Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 03:24:27 +0000 CVE-2022-2198 — WPQA < 5.7 - Subscriber+ Private Message Disclosure via IDOR https://cve.radiocsirt.org/vuln/cve-2022-2198 <p><strong>Affected:</strong> Unknown WPQA Builder</p> <p>The WPQA Builder WordPress plugin before 5.7 which is a companion plugin to the Hilmer and Discy , does not check authorization before displaying private messages, allowing any logged in user to read other users private message using the message id, which can easily be brute forced.</p> <p><strong>Affected:</strong> Unknown WPQA Builder</p> <p>The WPQA Builder WordPress plugin before 5.7 which is a companion plugin to the Hilmer and Discy , does not check authorization before displaying private messages, allowing any logged in user to read other users private message using the message id, which can easily be brute forced.</p> https://cve.radiocsirt.org/vuln/cve-2022-2198