The WPQA Builder WordPress plugin before 5.7 which is a companion plugin to the Hilmer and Discy , does not check authorization before displaying private messages, allowing any logged in user to read other users private message using the message id, which can easily be brute forced.
CVE-2022-21979
Microsoft Exchange Information Disclosure Vulnerability. This CVE ID is unique from CVE-2022-30134, CVE-2022-34692.
CVE-2022-21978
Microsoft Exchange Server Elevation of Privilege Vulnerability.
CVE-2022-21977
Media Foundation Information Disclosure Vulnerability. This CVE ID is unique from CVE-2022-22010.
CVE-2022-21975
Windows Hyper-V Denial of Service Vulnerability.
CVE-2022-21974
Roaming Security Rights Management Services Remote Code Execution Vulnerability.