Skip to content
OpenAdvisories

Vendor

gVectors Team

45 known vulnerabilities.

Products

wpForo Forum 16 wpDiscuz 13 wpForo Forum (WordPress plugin) 6 Comments — wpDiscuz 4 WooDiscuz – WooCommerce Comments 2 Comments – wpDiscuz (WordPress plugin) 2 Display Custom Fields – wpView 1 wpForo + wpForo Advanced Attachments 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 3.7
    CVE-2026-22204

    wpDiscuz before 7.6.47 - Unsanitized Cookie Email Used as wp_mail() Recipient

    wpDiscuz before 7.6.47 contains an email header injection vulnerability that allows attackers to manipulate mail recipients by injecting malicious data into the comment_author_email cookie. Attackers can craft a malicious cookie value that, when processed thr…

    gVectors Team wpDiscuz
  • Low 2.7
    CVE-2023-46311

    WordPress wpDiscuz Plugin <= 7.6.3 is vulnerable to Insecure Direct Object References (IDOR)

    Authorization Bypass Through User-Controlled Key vulnerability in gVectors Team Comments – wpDiscuz.This issue affects Comments – wpDiscuz: from n/a through 7.6.3.

    gVectors Team Comments — wpDiscuz
  • Low 3.7
    CVE-2022-23984

    WordPress wpDiscuz plugin <= 7.3.11 - Sensitive Information Disclosure

    Sensitive information disclosure discovered in wpDiscuz WordPress plugin (versions <= 7.3.11).

    gVectors Team Comments – wpDiscuz (WordPress plugin) Web / CMS