Skip to content
OpenAdvisories

Product · advancedcoding

Comments – wpDiscuz

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2026-9148

    Comments <= 7.6.56 - Unauthenticated Stored Cross-Site Scripting via 'Website' Field

    The Comments – wpDiscuz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the guest commenter 'Website' field in versions up to, and including, 7.6.56 This is due to insufficient output escaping in the getCommentAuthor() function, which in…

    advancedcoding Comments – wpDiscuz Web / CMS