title: DW Question & Answer Pro <= 1.3.4 - Multiple CSRF
description: The DW Question & Answer Pro WordPress plugin through 1.3.4 does not properly check for CSRF in some of its functions, allowing attackers to make logged in users perform unwanted actions, such as update a comment or a question status.
problem types: CWE-352 Cross-Site Request Forgery (CSRF)
affected:
{
product: DW Question Answer Pro
vendor: Unknown
versions:
lessThanOrEqual: 1.3.4, status: affected, version: 1.3.4, versionType: custom
}