CVE

CVE-2022-1598

5.3

CVSS

Description

The WPQA Builder WordPress plugin before 5.5 which is a companion to the Discy and Himer , lacks authentication in a REST API endpoint, allowing unauthenticated users to discover private questions sent between users on the site.

Attack Vector

Privileges Req.

User Interaction

wpqa builder

Updated Sep 22, 2026View on NVD →

S4E scanner

mediumProduct Based Web Vulnerabilities~10 seconds

CVE-2022-1598 Scanner

Detects 'Information Disclosure' vulnerability in WPQA Builder plugin for Wordpress affects v. before 5.5.

Used 2.6k times · 5.9k assets checked · url

Scanner page →Run scanner

CVE history: wpqa builder

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →