Known vulnerabilities in Comments - wpDiscuz

Software CPE: cpe:2.3:a:advancedcoding:wpdiscuz:*:*:*:*:*:wordpress:*:*
Total vulnerabilities: 5
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Comments - wpDiscuz Comments - wpDiscuz is affected by 5 known vulnerabilities: 3 high, 1 medium, 1 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU99669 - Improper Authentication
CVE-2024-9488
CWE-287 High
No
No
7.6.25 04.11.2024 SB2024110451
#VU70076 - Authorization Bypass Through User-Controlled Key
CVE-2022-43492
CWE-639 Medium
No
No
7.5 09.12.2022 SB2022121317
#VU32945 - Unrestricted Upload of File with Dangerous Type
CWE-434 High
No
No
7.0.5 31.07.2020 SB2020073105
#VU29179 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-13640
CWE-89 High
Available
No
5.3.6 22.06.2020 SB2020062203
#VU20694 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
3.2.0 02.09.2019 SB2016053001