Skip to content
OpenAdvisories

Product · gVectors Team

wpDiscuz

13 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.7
    CVE-2026-22204

    wpDiscuz before 7.6.47 - Unsanitized Cookie Email Used as wp_mail() Recipient

    wpDiscuz before 7.6.47 contains an email header injection vulnerability that allows attackers to manipulate mail recipients by injecting malicious data into the comment_author_email cookie. Attackers can craft a malicious cookie value that, when processed thr…

    gVectors Team wpDiscuz