Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Comments – wpDiscuz — Vulnerabilities & Security Advisories 9

All 9 CVE vulnerabilities found in Comments – wpDiscuz, with AI-generated Chinese analysis, references, and POCs.

Vendor: Unknown

CVE IDTitleCVSSSeverityPublished
CVE-2024-9488 Comments – wpDiscuz <= 7.6.24 - Authentication Bypass via WordPress.com OAuth provider CWE-288 9.8 Critical2024-10-25
CVE-2024-6704 Comments – wpDiscuz <= 7.6.21 - Unauthenticated HTML Injection CWE-79 5.3 Medium2024-08-02
CVE-2024-2477 wpDiscuz <= 7.6.15 - Authenticated (Author+) Stored Cross-Site Scripting via Uploaded Image Alternative Text CWE-79 6.4 Medium2024-04-23
CVE-2023-51691 WordPress wpDiscuz Plugin <= 7.6.12 is vulnerable to Cross Site Scripting (XSS) CWE-79 5.9 Medium2024-02-01
CVE-2023-46311 WordPress wpDiscuz Plugin <= 7.6.3 is vulnerable to Insecure Direct Object References (IDOR) CWE-639 2.7 Low2023-12-20
CVE-2023-3869 wpDiscuz <= 7.6.3 - Insecure Direct Object Reference to Comment Rating Increase/Decrease CWE-639 5.3 Medium2023-10-20
CVE-2023-3998 wpDiscuz <= 7.6.3 - Insecure Direct Object Reference to Post Rating Increase/Decrease CWE-639 5.3 Medium2023-10-20
CVE-2021-24806 wpDiscuz < 7.3.4 - Arbitrary Comment Addition/Edition/Deletion via CSRF CWE-352 6.5 -2021-11-08
CVE-2021-24737 Comments - wpDiscuz <= 7.3.0 - Admin+ Stored Cross-Site Scripting CWE-79 4.8 -2021-10-11

All 9 known CVE vulnerabilities affecting Comments – wpDiscuz with full Chinese analysis, references, and POCs where available.