Skip to content
OpenAdvisories

Product · gVectors Team

wpDiscuz

13 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.1
    CVE-2026-22202

    wpDiscuz before 7.6.47 - Destructive GET Action Deletes All Comments by Email

    wpDiscuz before 7.6.47 contains a cross-site request forgery vulnerability that allows attackers to delete all comments associated with an email address by crafting a malicious GET request with a valid HMAC key. Attackers can embed the deletecomments action U…

    gVectors Team wpDiscuz
  • High 8.1
    CVE-2026-22193

    wpDiscuz before 7.6.47 - SQL Injection in getAllSubscriptions()

    wpDiscuz before 7.6.47 contains an SQL injection vulnerability in the getAllSubscriptions() function where string parameters lack proper quote escaping in SQL queries. Attackers can inject malicious SQL code through email, activation_key, subscription_date, a…

    gVectors Team wpDiscuz
  • High 7.5
    CVE-2026-22182

    wpDiscuz before 7.6.47 - Unauthenticated Email Notification Flood via wpdCheckNotificationType

    wpDiscuz before 7.6.47 contains an unauthenticated denial of service vulnerability that allows anonymous users to trigger mass notification emails by exploiting the checkNotificationType() function. Attackers can repeatedly call the wpdiscuz-ajax.php endpoint…

    gVectors Team wpDiscuz