Skip to contentAdvancedcoding Comments – Wpdiscuz vulnerabilities
- advancedcoding comments – wpdiscuzComments <= 7.6.56 - Unauthenticated Stored Cross-Site Scripting via 'Website' FieldCVE-2026-91487.2 High
- advancedcoding comments – wpdiscuz, gvectors wpdiscuz +1 moreComments – wpDiscuz <= 7.6.24 - Authentication Bypass via WordPress.com OAuth providerCVE-2024-94889.8 Critical
- advancedcoding comments – wpdiscuz, gvectors wpdiscuz, gvectorsteam comments-wpdiscuz +2 moreComments – wpDiscuz <= 7.6.21 - Unauthenticated HTML InjectionCVE-2024-67045.3 Medium
- gvectors wpdiscuz, advancedcoding comments – wpdiscuz +1 morewpDiscuz <= 7.6.15 - Authenticated (Author+) Stored Cross-Site Scripting via Uploaded Image Alternative TextCVE-2024-24776.4 Medium
- advancedcoding comments – wpdiscuz, gvectors wpdiscuz +1 moreWordPress wpDiscuz Plugin <= 7.6.12 is vulnerable to Cross Site Scripting (XSS)CVE-2023-516915.9 Medium
- advancedcoding comments – wpdiscuz, gvectors wpdiscuz +1 moreWordPress wpDiscuz Plugin <= 7.6.3 is vulnerable to Insecure Direct Object References (IDOR)CVE-2023-463112.7 Low
- gvectors wpdiscuz, advancedcoding comments – wpdiscuz +1 morewpDiscuz <= 7.6.3 - Insecure Direct Object Reference to Comment Rating Increase/DecreaseCVE-2023-38695.3 Medium
- gvectors wpdiscuz, advancedcoding comments – wpdiscuz +1 morewpDiscuz <= 7.6.3 - Insecure Direct Object Reference to Post Rating Increase/DecreaseCVE-2023-39985.3 Medium
- gvectors wpdiscuz, advancedcoding comments – wpdiscuz +1 morewpDiscuz < 7.3.4 - Arbitrary Comment Addition/Edition/Deletion via CSRFCVE-2021-248064.3 Medium
- advancedcoding comments – wpdiscuz, gvectors wpdiscuz +1 moreComments - wpDiscuz <= 7.3.0 - Admin+ Stored Cross-Site ScriptingCVE-2021-247374.8 Medium