Skip to content
OpenAdvisories

Product · siteheart

HyperComments

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2025-5701 Public exploit Scanner template

    HyperComments <= 1.2.2 - Unauthenticated (Subscriber+) Arbitrary Options Update

    The HyperComments plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the hc_request_handler function in all versions up to, and including, 1.2.2. This makes it pos…

    siteheart HyperComments Web / CMS
  • High 7.1
    CVE-2025-23509

    WordPress HyperComments plugin <= 0.9.6 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in siteheart HyperComments comments-with-hypercommentscom allows Reflected XSS.This issue affects HyperComments: from n/a through <= 0.9.6.

    siteheart HyperComments