Advancedcoding - vulnerabilities (CVEs)
10 CVEs in 2 products, 0 in the last 30 days, newest from 2026-07-03.
Products
- Comments Wpdiscuz - 6 CVEs
- Wpdiscuz - 4 CVEs
Newest CVEs of Advancedcoding
- CVE-2026-9148 - CVSS 7.2 (high), 2026-07-03: The Comments – wpDiscuz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the guest commenter 'Website' field in versions up to, and…
- CVE-2025-68997 - CVSS 5.3 (medium), 2025-12-30: Authorization Bypass Through User-Controlled Key vulnerability in AdvancedCoding wpDiscuz wpdiscuz allows Exploiting Incorrectly Configured Access Control…
- CVE-2025-59591 - CVSS 4.3 (medium), 2025-09-22: Missing Authorization vulnerability in AdvancedCoding wpDiscuz wpdiscuz allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…
- CVE-2023-46309 - CVSS 7.3 (high), 2025-01-02: Missing Authorization vulnerability in AdvancedCoding wpDiscuz wpdiscuz allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…
- CVE-2023-45760 - CVSS 8.8 (high), 2025-01-02: Missing Authorization vulnerability in AdvancedCoding wpDiscuz wpdiscuz allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…
- CVE-2024-9488 - CVSS 9.8 (critical), 2024-10-25: The Comments – wpDiscuz plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 7.6.24. This is due to insufficient…
- CVE-2024-6704 - CVSS 6.1 (medium), 2024-08-02: The Comments – wpDiscuz plugin for WordPress is vulnerable to HTML Injection in all versions up to, and including, 7.6.21. This is due to a lack of filtering…
- CVE-2024-2477 - CVSS 6.4 (medium), 2024-04-23: The wpDiscuz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Alternative Text' field of an uploaded image in all versions up to,…
- CVE-2023-3998 - CVSS 5.3 (medium), 2023-10-20: The wpDiscuz plugin for WordPress is vulnerable to unauthorized modification of data due to a missing authorization check on the userRate function in versions…
- CVE-2023-3869 - CVSS 5.3 (medium), 2023-10-20: The wpDiscuz plugin for WordPress is vulnerable to unauthorized modification of data due to a missing authorization check on the voteOnComment function in…
