AdvancedCoding vulnerabilities
We track 5 vulnerabilities in AdvancedCoding products across 2 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on November 4, 2026.
Latest AdvancedCoding vulnerabilities
- 7.1 High severity
wpDiscuz: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AdvancedCoding wpDiscuz wpdiscuz allows Stored XSS.This issue affects wpDiscuz: from n/a through 7.6.73.
- 7.2 High severity
Comments – wpDiscuz: Improper Neutralization of Input During Web Page Generation
The Comments – wpDiscuz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the guest commenter 'Website' field in versions up to, and including, 7.6.56 This is due to insufficient output escaping in the getCommentAuthor() function, which int
- 7.3 High severity
wpDiscuz: Missing Authorization
Missing Authorization vulnerability in AdvancedCoding wpDiscuz wpdiscuz allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects wpDiscuz: from n/a through <= 7.6.10.
- 8.8 High severity
wpDiscuz: Missing Authorization
Missing Authorization vulnerability in AdvancedCoding wpDiscuz wpdiscuz allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects wpDiscuz: from n/a through <= 7.6.3.
- 9.8 Critical severity
Comments – wpDiscuz: Authentication Bypass Using an Alternate Path or Channel
The Comments – wpDiscuz plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 7.6.24. This is due to insufficient verification on the user being returned by the social login token. This makes it possible for unauthen