Description
WordPress Plugin DW Question & Answer is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently e.g. delete or edit answers. WordPress Plugin DW Question & Answer version 1.2.9 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.2.10 or latest
References
Related Vulnerabilities
WordPress Plugin Post SMTP Mailer/Email Log Cross-Site Request Forgery (2.0.2)
WordPress Plugin Paid Memberships Pro 'memberslist-csv.php' Information Disclosure (1.4.9)
WordPress Plugin Travelpayouts:Flights & Hotels Travel Search Cross-Site Scripting (0.7.12)
WordPress Plugin Cart66 Lite::WordPress Ecommerce Cross-Site Scripting (1.5.4)