Skip to content
OpenAdvisories

Vendor

scossar

1 known vulnerabilities.

Products

WP Discourse 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2025-11983

    WP Discourse <= 2.5.9 - Authenticated (Author+) Information Exposure

    The WP Discourse plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.5.9. This is due to the plugin unconditionally sending Discourse API credentials (Api-Key and Api-Username headers) to any host specified in a …

    scossar WP Discourse Web / CMS