Skip to content
OpenAdvisories

Product · siteheart

HyperComments

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2025-5701 Public exploit

    HyperComments <= 1.2.2 - Unauthenticated (Subscriber+) Arbitrary Options Update

    The HyperComments plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the hc_request_handler function in all versions up to, and including, 1.2.2. This makes it pos…

    siteheart HyperComments Web / CMS