Wpdiscuz
by WordPress
Source repositories
CVEs (25)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2023-47775 | 0.00 | — | 0.00 | Nov 22, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in gVectors Team Comments — wpDiscuz plugin <= 7.6.11 versions. | |||
| CVE-2022-43492 | 0.00 | — | 0.01 | Nov 18, 2022 | Auth. (subscriber+) Insecure Direct Object References (IDOR) vulnerability in Comments – wpDiscuz plugin 7.4.2 on WordPress. | |||
| CVE-2022-23984 | 0.00 | — | 0.01 | Feb 21, 2022 | Sensitive information disclosure discovered in wpDiscuz WordPress plugin (versions <= 7.3.11). | |||
| CVE-2021-24806 | 0.00 | — | 0.00 | Nov 8, 2021 | The wpDiscuz WordPress plugin before 7.3.4 does check for CSRF when adding, editing and deleting comments, which could allow attacker to make logged in users such as admin edit and delete arbitrary comment, or the user who made the comment to edit it via a CSRF attack. Attackers… | |||
| CVE-2021-24737 | 0.00 | — | 0.01 | Oct 11, 2021 | The Comments – wpDiscuz WordPress plugin through 7.3.0 does not properly sanitise or escape the Follow and Unfollow messages before outputting them in the page, which could allow high privilege users to perform Stored Cross-Site Scripting attacks even when the unfiltered_html… |
- CVE-2023-47775Nov 22, 2023risk 0.00cvss —epss 0.00
Cross-Site Request Forgery (CSRF) vulnerability in gVectors Team Comments — wpDiscuz plugin <= 7.6.11 versions.
- CVE-2022-43492Nov 18, 2022risk 0.00cvss —epss 0.01
Auth. (subscriber+) Insecure Direct Object References (IDOR) vulnerability in Comments – wpDiscuz plugin 7.4.2 on WordPress.
- CVE-2022-23984Feb 21, 2022risk 0.00cvss —epss 0.01
Sensitive information disclosure discovered in wpDiscuz WordPress plugin (versions <= 7.3.11).
- CVE-2021-24806Nov 8, 2021risk 0.00cvss —epss 0.00
The wpDiscuz WordPress plugin before 7.3.4 does check for CSRF when adding, editing and deleting comments, which could allow attacker to make logged in users such as admin edit and delete arbitrary comment, or the user who made the comment to edit it via a CSRF attack. Attackers…
- CVE-2021-24737Oct 11, 2021risk 0.00cvss —epss 0.01
The Comments – wpDiscuz WordPress plugin through 7.3.0 does not properly sanitise or escape the Follow and Unfollow messages before outputting them in the page, which could allow high privilege users to perform Stored Cross-Site Scripting attacks even when the unfiltered_html…
Page 2 of 2