Description
WordPress Plugin DW Question & Answer is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently e.g. delete or edit answers. WordPress Plugin DW Question & Answer version 1.2.9 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.2.10 or latest
References
Related Vulnerabilities
MySQL Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-4452)
MySQL Other Vulnerability (CVE-2006-4226)
Oracle Application Server CVE-2008-4017 Vulnerability (CVE-2008-4017)
Joomla! Core 2.5.x Security Bypass (2.5.0 - 2.5.24)
WordPress Plugin The Holiday Calendar Cross-Site Scripting (1.11.2)