Description
WordPress Plugin DW Question & Answer is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently e.g. delete or edit answers. WordPress Plugin DW Question & Answer version 1.2.9 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.2.10 or latest
References
Related Vulnerabilities
WordPress 5.0 Multiple Vulnerabilities (5.0 - 5.0)
WordPress Plugin BetterOptin Cross-Site Scripting (1.2.4)
WordPress Plugin Comment Rating 'id' Parameter SQL Injection (2.9.23)
WordPress Plugin Social Media Tab Remote Code Execution (1.0.9)
WordPress Plugin Quotes and Tips by BestWebSoft Cross-Site Scripting (1.32)