Skip to content
OpenAdvisories

Vendor

Alexander

3 known vulnerabilities.

Products

AnyComment 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2025-60240

    WordPress AnyComment plugin <= 0.3.6 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Alexander AnyComment anycomment allows PHP Local File Inclusion.This issue affects AnyComment: from n/a through <= 0.3.6.

    Alexander AnyComment
  • High 8.5
    CVE-2025-48091

    WordPress AnyComment plugin <= 0.3.6 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Alexander AnyComment anycomment allows SQL Injection.This issue affects AnyComment: from n/a through <= 0.3.6.

    Alexander AnyComment