title: DW Question & Answer Pro <= 1.3.4 - Arbitrary Comment Edition via IDOR
description: The DW Question & Answer Pro WordPress plugin through 1.3.4 does not check that the comment to edit belongs to the user making the request, allowing any user to edit other comments.
problem types: CWE-639 Authorization Bypass Through User-Controlled Key
affected:
{
product: DW Question Answer Pro
vendor: Unknown
versions:
lessThanOrEqual: 1.3.4, status: affected, version: 1.3.4, versionType: custom
}