Comments – wpDiscuz vulnerabilities

2 known vulnerabilities in Comments – wpDiscuz from AdvancedCoding. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  Comments – wpDiscuz: Improper Neutralization of Input During Web Page Generation

  CVE-2026-9148Jul 3, 2026AdvancedCoding

  The Comments – wpDiscuz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the guest commenter 'Website' field in versions up to, and including, 7.6.56 This is due to insufficient output escaping in the getCommentAuthor() function, which int

• 9.8 Critical severity

  Comments – wpDiscuz: Authentication Bypass Using an Alternate Path or Channel

  CVE-2024-9488Oct 25, 2024AdvancedCoding

  The Comments – wpDiscuz plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 7.6.24. This is due to insufficient verification on the user being returned by the social login token. This makes it possible for unauthen