The DW Question & Answer Pro WordPress plugin through 1.3.4 does not check that the comment to edit belongs to the user making the request, allowing any user to edit other comments.CreditsBrandon RoldanReferenceshttps://wpscan.com/vulnerability/cd37ca81-d683-4955-bc97-60204cb9c346