CW
Product
Comments – wpDiscuz
6
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 4Low 0
Watch
Add Comments – wpDiscuz to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-9488 | 9.8 | Oct 25 | Comments – wpDiscuz <= 7.6.24 - Authentication Bypass via WordPress.com OAuth provider Affected: through 7.6.24 |
| CVE-2026-9148 | 7.2 | Jul 3 | Comments <= 7.6.56 - Unauthenticated Stored Cross-Site Scripting via 'Website' Field Affected: through 7.6.56 |
| CVE-2024-6704 | 6.1 | Aug 2 | Comments – wpDiscuz <= 7.6.21 - Unauthenticated HTML Injection Affected: through 7.6.21 |
| CVE-2024-2477 | 5.4 | Apr 23 | wpDiscuz <= 7.6.15 - Authenticated (Author+) Stored Cross-Site Scripting via Uploaded Image Alternative Text Affected: through 7.6.15 |
| CVE-2023-3869 | 5.3 | Oct 20 | wpDiscuz <= 7.6.3 - Insecure Direct Object Reference to Comment Rating Increase/Decrease Affected: through 7.6.3 |
| CVE-2023-3998 | 5.3 | Oct 20 | wpDiscuz <= 7.6.3 - Insecure Direct Object Reference to Post Rating Increase/Decrease Affected: through 7.6.3 |
Showing 6