{"id":"CVE-2022-3343","aliases":["EUVD-2022-42730","GHSA-v24x-rp9v-pm6r"],"status":"published","title":"WPQA \u003c 5.9.3 - Missing validation lead to functionality abuse","description":"The WPQA Builder WordPress plugin before 5.9.3 (which is a companion plugin used with Discy and Himer Discy WordPress themes) incorrectly tries to validate that a user already follows another in the wpqa_following_you_ajax action, allowing a user to inflate their score on the site by having another user send repeated follow actions to them.","severity":{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00513,"percentile":0.43989,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-639"],"published":"2023-01-09T22:13:27Z","modified":"2026-06-17T04:59:20Z","products":[{"vendor":"2code","product":"wpqa_builder"},{"vendor":"unknown","product":"discy"},{"vendor":"unknown","product":"himer"},{"vendor":"unknown","product":"wpqa builder"}],"references":[{"url":"https://wpscan.com/vulnerability/e507b1b5-1a56-4b2f-b7e7-e22f6da1e32a","tags":["exploit","vdb-entry","technical-description","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3343"},{"url":"https://github.com/advisories/GHSA-v24x-rp9v-pm6r"}],"sources":{"cve":[{"id":"CVE-2022-3343","title":"WPQA \u003c 5.9.3 - Missing validation lead to functionality abuse","description":"The WPQA Builder WordPress plugin before 5.9.3 (which is a companion plugin used with Discy and Himer Discy WordPress themes) incorrectly tries to validate that a user already follows another in the wpqa_following_you_ajax action, allowing a user to inflate their score on the site by having another user send repeated follow actions to them.","status":"published","published":"2023-01-09T22:13:27.335Z","modified":"2025-04-09T19:21:25.003Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","level":"low","assessor":"adp"}],"updated_at":"2026-11-02T14:34:33.24035Z"}],"euvd":[{"id":"EUVD-2022-42730","description":"The WPQA Builder WordPress plugin before 5.9.3 (which is a companion plugin used with Discy and Himer Discy WordPress themes) incorrectly tries to validate that a user already follows another in the wpqa_following_you_ajax action, allowing a user to inflate their score on the site by having another user send repeated follow actions to them.","status":"published","published":"2023-01-09T22:13:27Z","modified":"2025-04-09T19:21:25Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T20:52:37.733624Z"}],"ghsa":[{"id":"GHSA-v24x-rp9v-pm6r","title":"The WPQA Builder WordPress plugin before 5.9.3 (which is a companion plugin used with Discy and...","description":"The WPQA Builder WordPress plugin before 5.9.3 (which is a companion plugin used with Discy and Himer WordPress themes) incorrectly tries to validate that a user already follows another in the wpqa_following_you_ajax action, allowing a user to inflate their score on the site by having another user send repeated follow actions to them.","status":"published","published":"2023-01-10T00:30:26Z","modified":"2023-01-29T05:03:25Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","level":"low"}],"cwes":["CWE-639"],"updated_at":"2026-11-02T14:45:19.009235Z"}],"nvd":[{"id":"CVE-2022-3343","description":"The WPQA Builder WordPress plugin before 5.9.3 (which is a companion plugin used with Discy and Himer Discy WordPress themes) incorrectly tries to validate that a user already follows another in the wpqa_following_you_ajax action, allowing a user to inflate their score on the site by having another user send repeated follow actions to them.","status":"published","published":"2023-01-09T23:15:26.593Z","modified":"2026-06-17T04:59:20.707Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","level":"low","assessor":"primary"},{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","level":"low","assessor":"secondary"}],"updated_at":"2026-11-02T14:07:35.157734Z"}]}}