CVE-2022-3343

LowCVSS 3.5/10Last modified Jun 17, 2026

Description

The WPQA Builder WordPress plugin before 5.9.3 (which is a companion plugin used with Discy and Himer Discy WordPress themes) incorrectly tries to validate that a user already follows another in the wpqa_following_you_ajax action, allowing a user to inflate their score on the site by having another user send repeated follow actions to them.

Metrics

CVSS 3.1 3.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

Affected software

No affected versions have been published.

Timeline

Published
Jan 9, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-33445.5A flaw was found in the KVM's AMD nested virtualization (SVM). A malicious L1 guest could purposely fail to intercept the shutdown of a coopCVE-2022-33466.5DNSSEC validation is not performed correctly. An attacker can cause this package to report successful validation for invalid, attacker-contrCVE-2022-33477.5DNSSEC validation is not performed correctly. An attacker can cause this package to report successful validation for invalid, attacker-contrCVE-2022-33484.9Just like in the previous report, an attacker could steal the account of different users. But in this case, it's a little bit more specific,CVE-2022-33496.8A vulnerability was found in Sony PS4 and PS5. It has been classified as critical. This affects the function UVFAT_readupcasetable of the coCVE-2022-33504.8The Contact Bank WordPress plugin through 3.0.30 does not sanitise and escape some of its Form settings, which could allow high privilege usCVE-2022-33514.3An issue has been discovered in GitLab EE affecting all versions starting from 13.7 before 15.2.5, all versions starting from 15.3 before 15CVE-2022-33527.8Use After Free in GitHub repository vim/vim prior to 9.0.0614.CVE-2022-33537.5A vulnerability exists in the IEC 61850 communication stack that affects multiple Hitachi Energy products.  An attacker could exploit the vCVE-2022-33547.5A vulnerability has been found in Open5GS up to 2.4.10 and classified as problematic. This vulnerability affects unknown code in the libraryCVE-2022-33555.4Cross-site Scripting (XSS) - Stored in GitHub repository inventree/inventree prior to 0.8.3.CVE-2022-33578.8The Smart Slider 3 WordPress plugin before 3.5.1.11 unserialises the content of an imported file, which could lead to PHP object injection i
CVE-2022-3343: Low severity, CVSS 3.5 | Vulnix