advancedcoding vulnerabilities

CVEs per yearBy the year they were published

1. 20232
2. 20243
3. 20254
4. 20262

Newest CVEs

• CVE-2026-119366

  WordPress wpDiscuz plugin <= 7.6.73 - Cross Site Scripting (XSS) vulnerability

  AdvancedCoding · wpDiscuz

  High7.1
• CVE-2026-9148

  Comments <= 7.6.56 - Unauthenticated Stored Cross-Site Scripting via 'Website' Field

  advancedcoding · Comments – wpDiscuz

  High7.2
• CVE-2025-68997

  WordPress wpDiscuz plugin <= 7.6.43 - Insecure Direct Object References (IDOR) vulnerability

  AdvancedCoding · wpDiscuz

  Medium5.3
• CVE-2025-59591

  WordPress wpDiscuz Plugin <= 7.6.33 - Broken Access Control Vulnerability

  AdvancedCoding · wpDiscuz

  Medium4.3
• CVE-2023-46309

  WordPress wpDiscuz plugin <= 7.6.10 - Broken Access Control vulnerability

  AdvancedCoding · wpDiscuz

  Medium5.3
• CVE-2023-45760

  WordPress wpDiscuz plugin <= 7.6.3 - Broken Access Control vulnerability

  AdvancedCoding · wpDiscuz

  Medium4.3
• CVE-2024-9488

  Comments – wpDiscuz <= 7.6.24 - Authentication Bypass via WordPress.com OAuth provider

  advancedcoding · Comments – wpDiscuz

  Critical9.8
• CVE-2024-6704

  Comments – wpDiscuz <= 7.6.21 - Unauthenticated HTML Injection

  advancedcoding · Comments – wpDiscuz

  Medium5.3
• CVE-2024-2477

  wpDiscuz <= 7.6.15 - Authenticated (Author+) Stored Cross-Site Scripting via Uploaded Image Alternative Text

  advancedcoding · Comments – wpDiscuz

  Medium6.4
• CVE-2023-3869

  wpDiscuz <= 7.6.3 - Insecure Direct Object Reference to Comment Rating Increase/Decrease

  advancedcoding · Comments – wpDiscuz

  Medium5.3