Skip to content
OpenAdvisories

Vendor

advancedcoding

11 known vulnerabilities.

Products

Comments – wpDiscuz 6 wpDiscuz 5
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2026-119366

    WordPress wpDiscuz plugin <= 7.6.73 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AdvancedCoding wpDiscuz wpdiscuz allows Stored XSS.This issue affects wpDiscuz: from n/a through 7.6.73.

    advancedcoding wpDiscuz
  • High 7.2
    CVE-2026-9148

    Comments <= 7.6.56 - Unauthenticated Stored Cross-Site Scripting via 'Website' Field

    The Comments – wpDiscuz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the guest commenter 'Website' field in versions up to, and including, 7.6.56 This is due to insufficient output escaping in the getCommentAuthor() function, which in…

    advancedcoding Comments – wpDiscuz Web / CMS