Advancedcoding Wpdiscuz vulnerabilities

• advancedcoding wpdiscuz WordPress wpDiscuz plugin <= 7.6.73 - Cross Site Scripting (XSS) vulnerability CVE-2026-119366 7.1 HighNovember 4, 2026
• advancedcoding comments – wpdiscuz Comments <= 7.6.56 - Unauthenticated Stored Cross-Site Scripting via 'Website' Field CVE-2026-9148 7.2 HighJuly 3, 2026
• advancedcoding wpdiscuz WordPress wpDiscuz plugin <= 7.6.43 - Insecure Direct Object References (IDOR) vulnerability CVE-2025-68997 5.3 MediumDecember 30, 2025
• advancedcoding wpdiscuz WordPress wpDiscuz Plugin <= 7.6.33 - Broken Access Control Vulnerability CVE-2025-59591 4.3 MediumSeptember 22, 2025
• advancedcoding wpdiscuz WordPress wpDiscuz plugin <= 7.6.10 - Broken Access Control vulnerability CVE-2023-46309 5.3 MediumJanuary 2, 2025
• advancedcoding wpdiscuz WordPress wpDiscuz plugin <= 7.6.3 - Broken Access Control vulnerability CVE-2023-45760 4.3 MediumJanuary 2, 2025
• advancedcoding comments – wpdiscuz, gvectors wpdiscuz +1 more Comments – wpDiscuz <= 7.6.24 - Authentication Bypass via WordPress.com OAuth provider CVE-2024-9488 9.8 CriticalOctober 25, 2024
• advancedcoding comments – wpdiscuz, gvectors wpdiscuz, gvectorsteam comments-wpdiscuz +2 more Comments – wpDiscuz <= 7.6.21 - Unauthenticated HTML Injection CVE-2024-6704 5.3 MediumAugust 2, 2024
• gvectors wpdiscuz, advancedcoding comments – wpdiscuz +1 more wpDiscuz <= 7.6.15 - Authenticated (Author+) Stored Cross-Site Scripting via Uploaded Image Alternative Text CVE-2024-2477 6.4 MediumApril 23, 2024
• advancedcoding comments – wpdiscuz, gvectors wpdiscuz +1 more WordPress wpDiscuz Plugin <= 7.6.12 is vulnerable to Cross Site Scripting (XSS) CVE-2023-51691 5.9 MediumFebruary 1, 2024
• advancedcoding comments – wpdiscuz, gvectors wpdiscuz +1 more WordPress wpDiscuz Plugin <= 7.6.3 is vulnerable to Insecure Direct Object References (IDOR) CVE-2023-46311 2.7 LowDecember 20, 2023
• gvectors wpdiscuz, advancedcoding comments – wpdiscuz +1 more wpDiscuz <= 7.6.3 - Insecure Direct Object Reference to Comment Rating Increase/Decrease CVE-2023-3869 5.3 MediumOctober 20, 2023
• gvectors wpdiscuz, advancedcoding comments – wpdiscuz +1 more wpDiscuz <= 7.6.3 - Insecure Direct Object Reference to Post Rating Increase/Decrease CVE-2023-3998 5.3 MediumOctober 20, 2023
• gvectors wpdiscuz, advancedcoding comments – wpdiscuz +1 more wpDiscuz < 7.3.4 - Arbitrary Comment Addition/Edition/Deletion via CSRF CVE-2021-24806 4.3 MediumNovember 8, 2021
• advancedcoding comments – wpdiscuz, gvectors wpdiscuz +1 more Comments - wpDiscuz <= 7.3.0 - Admin+ Stored Cross-Site Scripting CVE-2021-24737 4.8 MediumOctober 11, 2021