CSRF
4 records57.1%First: 2024. Latest: 2024.
Theme security history
Himer - Social Questions and Answers WordPress Theme Vulnerability History & Security Timeline
The Wordfence Intelligence dataset currently contains 7 vulnerability records associated with Himer - Social Questions and Answers WordPress Theme, published between 2022 and 2024.
Dataset last synchronized: 2026-08-03 00:31:25 UTC
At a glance
Security Snapshot
7Total records
0Critical
0High
7Medium
0Low
0Informational
6Patched records
1Currently marked unpatched
2022-12-13First disclosure
2024-07-15Latest disclosure
7 of 7CVE coverage
Use this history
Check and watch Himer - Social Questions and Answers WordPress Theme.
A history record does not establish whether the version installed on your website is affected. Enter the exact version in the checker, or add this software to a private Critical/High alert watchlist.
Year-by-Year Timeline
| Year | Records | Relative volume |
|---|---|---|
| 2022 | 1 | |
| 2024 | 6 |
Severity Breakdown
| Severity | Records | Share |
|---|---|---|
| Medium | 7 | 100% |
Vulnerability-Type Breakdown
Missing Authorization
2 records28.6%First: 2022. Latest: 2024.
Cross-Site Scripting
1 record14.3%First: 2024. Latest: 2024.
Patch Status
- Patched
- 6
- Currently marked unpatched
- 1
- Unknown status
- 0
Patch status reflects the latest successfully synchronized source dataset and must be checked against the installed version.
Latest Known Patched Versions
2.1.32.1.1
Affected-Version History
Ranges are deduplicated by source range record and shown with the associated disclosure and known patched versions.
| Affected range | Vulnerability | Published | Patched version | Severity |
|---|---|---|---|---|
*-2.1.2 | Himer - Social Questions and Answers <= 2.1.2 - Cross-Site Request Forgery to Arbitrary User Invites | July 15, 2024 | 2.1.3 | Medium |
*-2.1.0 | Himer <= 2.1.0 - Cross-Site Request Forgery to Private Group Join | June 12, 2024 | 2.1.1 | Medium |
*-2.1.0 | Himer <= 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting | June 12, 2024 | 2.1.1 | Medium |
*-2.1.0 | Himer <= 2.1.0 - Cross-Site Request Forgery to Poll Voting | June 12, 2024 | 2.1.1 | Medium |
*-2.1.0 | Himer <= 2.1.0 - Cross-Site Request Forgery to Group Leave | June 12, 2024 | 2.1.1 | Medium |
*-2.1.0 | Himer - Social Questions and Answers <= 2.1.0 - Authenticated (Subscriber+) Insecure Direct Object Reference | June 12, 2024 | 2.1.1 | Medium |
*-1.9.3 | WPQA - Builder forms Addon For WordPress (<= 5.9.2), Himer (<= 1.9.3) and Discy (<= 5.5.3) - Authenticated (Subscriber+) Insecure Direct Object Reference | December 13, 2022 | Not supplied | Medium |
Selected source records
Latest Records
MediumCVE-2024-2232
Himer - Social Questions and Answers <= 2.1.2 - Cross-Site Request Forgery to Arbitrary User Invites
Published: July 15, 2024
- Affected versions
- *-2.1.2
- Patched versions
- 2.1.3
MediumCVE-2024-2231
Himer - Social Questions and Answers <= 2.1.0 - Authenticated (Subscriber+) Insecure Direct Object Reference
Published: June 12, 2024
- Affected versions
- *-2.1.0
- Patched versions
- 2.1.1
MediumCVE-2024-2233
Himer <= 2.1.0 - Cross-Site Request Forgery to Group Leave
Published: June 12, 2024
- Affected versions
- *-2.1.0
- Patched versions
- 2.1.1
MediumCVE-2024-2235
Himer <= 2.1.0 - Cross-Site Request Forgery to Poll Voting
Published: June 12, 2024
- Affected versions
- *-2.1.0
- Patched versions
- 2.1.1
MediumCVE-2024-2234
Himer <= 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published: June 12, 2024
- Affected versions
- *-2.1.0
- Patched versions
- 2.1.1
MediumCVE-2024-2040
Himer <= 2.1.0 - Cross-Site Request Forgery to Private Group Join
Published: June 12, 2024
- Affected versions
- *-2.1.0
- Patched versions
- 2.1.1
MediumCVE-2022-3343
WPQA - Builder forms Addon For WordPress (<= 5.9.2), Himer (<= 1.9.3) and Discy (<= 5.5.3) - Authenticated (Subscriber+) Insecure Direct Object Reference
Published: December 13, 2022
- Affected versions
- *-1.9.3
- Patched versions
- Not supplied
- Affected versions
- *-5.9.2
- Patched versions
- 5.9.3
- Affected versions
- *-5.5.3
- Patched versions
- Not supplied
Highest-Severity Records
MediumCVE-2024-2231
Himer - Social Questions and Answers <= 2.1.0 - Authenticated (Subscriber+) Insecure Direct Object Reference
Published: June 12, 2024
- Affected versions
- *-2.1.0
- Patched versions
- 2.1.1
MediumCVE-2024-2234
Himer <= 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published: June 12, 2024
- Affected versions
- *-2.1.0
- Patched versions
- 2.1.1
MediumCVE-2024-2232
Himer - Social Questions and Answers <= 2.1.2 - Cross-Site Request Forgery to Arbitrary User Invites
Published: July 15, 2024
- Affected versions
- *-2.1.2
- Patched versions
- 2.1.3
MediumCVE-2022-3343
WPQA - Builder forms Addon For WordPress (<= 5.9.2), Himer (<= 1.9.3) and Discy (<= 5.5.3) - Authenticated (Subscriber+) Insecure Direct Object Reference
Published: December 13, 2022
- Affected versions
- *-1.9.3
- Patched versions
- Not supplied
- Affected versions
- *-5.9.2
- Patched versions
- 5.9.3
- Affected versions
- *-5.5.3
- Patched versions
- Not supplied
MediumCVE-2024-2233
Himer <= 2.1.0 - Cross-Site Request Forgery to Group Leave
Published: June 12, 2024
- Affected versions
- *-2.1.0
- Patched versions
- 2.1.1
MediumCVE-2024-2235
Himer <= 2.1.0 - Cross-Site Request Forgery to Poll Voting
Published: June 12, 2024
- Affected versions
- *-2.1.0
- Patched versions
- 2.1.1
MediumCVE-2024-2040
Himer <= 2.1.0 - Cross-Site Request Forgery to Private Group Join
Published: June 12, 2024
- Affected versions
- *-2.1.0
- Patched versions
- 2.1.1
Currently Marked Unpatched Records
MediumCVE-2022-3343
WPQA - Builder forms Addon For WordPress (<= 5.9.2), Himer (<= 1.9.3) and Discy (<= 5.5.3) - Authenticated (Subscriber+) Insecure Direct Object Reference
Published: December 13, 2022
- Affected versions
- *-1.9.3
- Patched versions
- Not supplied
- Affected versions
- *-5.9.2
- Patched versions
- 5.9.3
- Affected versions
- *-5.5.3
- Patched versions
- Not supplied
Need help reviewing an exposed WordPress website?
Running an affected version does not prove that a website was compromised. Suspicious redirects, unknown administrators, injected content, unexpected files or recurring malware may require a manual investigation.
Vulnerability data: Wordfence Intelligence. Analysis and practical guidance: 3Zero Digital.
Data Source, Attribution and Methodology
This page aggregates active Production Feed records. Counts are not software-quality rankings, and an affected version does not prove exploitation or infection. Read the full methodology.