CyberRota Analysis
AI analysis pending.
CVE
CVE-2022-2198
Severity
MEDIUM
CVSS
4.3
EPSS
0.63%
WordPress
Original NVD Description
The WPQA Builder WordPress plugin before 5.7 which is a companion plugin to the Hilmer and Discy , does not check authorization before displaying private messages, allowing any logged in user to read other users private message using the message id, which can easily be brute forced.