CVE-2022-3343: 2code Wpqa Builder

Low severity, CVSS 3.5. EPSS: 0.5% chance of exploitation in the next 30 days.

The WPQA Builder WordPress plugin before 5.9.3 (which is a companion plugin used with Discy and Himer Discy WordPress themes) incorrectly tries to validate that a user already follows another in the wpqa_following_you_ajax action, allowing a user to inflate their score on the site by having another user send repeated follow actions to them.

Affected products

• 2code Wpqa Builder: before 5.9.3 (fixed in 5.9.3)

Published 2023-01-09. Last modified 2026-06-17.