Medium 5.3
2026-03-13< 7.6.47
CVE-2026-22201
Comments – wpDiscuz
Minimum safe version
7.6.47
Update to 7.6.47 or later to address 46 fixable vulnerabilities
Latest available7.6.54 ✓Affected up to7.0.4 ⚠
High 7.5
2026-03-13< 7.6.47
CVE-2026-22199
High 7.5
2026-03-13< 7.6.47
CVE-2026-22193
Critical 9.9
2026-03-13< 7.6.47
CVE-2026-22192
Medium 5.4
2026-03-13< 7.6.47
CVE-2026-22183
Medium 5.2
2026-03-13< 7.6.47
CVE-2026-22191
High 7.5
2026-03-13< 7.6.47
CVE-2026-22182
Medium 6.5
2026-03-13< 7.6.47
CVE-2026-22202
Medium 4.9
2026-03-13< 7.6.47
CVE-2026-22203
Medium 5.3
2026-03-13< 7.6.47
CVE-2026-22204
Medium 5.3
2026-03-13< 7.6.47
CVE-2026-22216
Medium 5.5
2026-03-13< 7.6.47
CVE-2026-22209
Medium 6.1
2026-03-13< 7.6.47
CVE-2026-22210
Medium 5.4
2026-03-13< 7.6.47
CVE-2026-22215
Medium 5.3
2026-01-01< 7.6.40
CVE-2025-13820
Medium 5.3
2025-12-30< 7.6.44
CVE-2025-68997
Medium 4.3
2025-09-22< 7.6.34
WordPress wpDiscuz Plugin <= 7.6.33 is vulnerable to Broken Access Control
Critical 9.8
2024-10-25< 7.6.25
CVE-2024-9488
Medium 6.1
2024-08-02< 7.6.22
CVE-2024-6704
Medium 5.4
2024-06-08< 7.6.19
CVE-2024-35681
Medium 5.4
2024-04-23< 7.6.16
CVE-2024-2477
N/A
< 7.6.6
wpDiscuz < 7.6.6 - Unauthenticated SQL Injection
N/A
< 7.6.6
wpDiscuz < 7.6.6 - Unauthenticated SQL Injection
Medium 5.9
2024-12-27< 7.6.13
WordPress wpDiscuz Plugin <= 7.6.12 is vulnerable to Cross Site Scripting (XSS)
N/A
2023-11-17< 7.6.13
wpDiscuz <= 7.6.12 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium 4.3
2023-11-22< 7.6.12
CVE-2023-47775
High 7.1
2023-11-06< 7.6.12
CVE-2023-47185
N/A
2023-10-31< 7.6.12
wpDiscuz <= 7.6.11 - Unauthenticated Stored Cross-Site Scripting via Comment Uploaded Image Filename
Low 2.7
2023-12-20< 7.6.4
CVE-2023-46311
Medium 5.3
2024-06-04< 7.6.11
CVE-2023-46310
Medium 5.3
2025-01-02< 7.6.11
CVE-2023-46309
N/A
2023-10-20< 7.6.11
wpDiscuz <= 7.6.10 - Insufficient Authorization to Comment Submission on Deleted Posts
Medium 4.3
2025-01-02< 7.6.4
CVE-2023-45760
N/A
2023-09-19< 7.6.6
WordPress wpDiscuz Plugin < 7.6.6 is vulnerable to SQL Injection
N/A
2023-09-18< 7.6.6
wpDiscuz <= 7.6.5 - Unauthenticated SQL Injection
Medium 5.3
2023-10-20< 7.6.4
CVE-2023-3998
Medium 5.3
2023-10-20< 7.6.4
CVE-2023-3869
N/A
< 3.2.0
wpDiscuz <= 3.1.4 - Reflected Cross-Site Scripting (XSS)
N/A
2016-05-30< 3.2.0
Comments - wpDiscuz <= 3.1.4 - Reflected Cross-Site Scripting
Medium 4.3
2022-11-18< 7.5
CVE-2022-43492
N/A
2016-05-30< 3.1.5
WordPress wpDiscuz Plugin <= 3.1.4 - Reflected Cross Site Scripting (XSS)
N/A
2017-06-20< 4.0.0
WordPress wpDiscuz plugin <= 3.2.8 - Cross-Site Request Forgery (CSRF) Vulnerability
Critical 9.8
2020-06-18< 5.3.6
CVE-2020-13640
Critical 10.0
2021-06-06≥ 7.0 and ≤ 7.0.4
Comments - wpDiscuz 7.0 - 7.0.4 - Unauthenticated Arbitrary File Upload leading to Remote Code Execution
Medium 4.8
2021-10-11< 7.3.2
CVE-2021-24737
Medium 4.3
2021-11-08< 7.3.4
CVE-2021-24806
High 7.5
2022-02-21< 7.3.12
CVE-2022-23984