gVectors vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20251
3. 202611

Newest CVEs

• CVE-2026-22216

  wpDiscuz before 7.6.47 - No Rate Limiting on Subscription Endpoints with LIKE Wildcard Bypass

  gVectors · wpDiscuz

  Medium6.9
• CVE-2026-22215

  wpDiscuz before 7.6.47 - Missing CSRF Protection on wpdGetFollowsPage

  gVectors · wpDiscuz

  Medium5.3
• CVE-2026-22210

  wpDiscuz before 7.6.47 - Cross-Site Scripting via Unescaped Attachment URLs

  gVectors · wpDiscuz

  Low2.1
• CVE-2026-22209

  wpDiscuz before 7.6.47 - Cross-Site Scripting via Unescaped Custom CSS in Style Tag

  gVectors · wpDiscuz

  Medium5.1
• CVE-2026-22204

  wpDiscuz before 7.6.47 - Unsanitized Cookie Email Used as wp_mail() Recipient

  gVectors · wpDiscuz

  Medium6.3
• CVE-2026-22203

  wpDiscuz before 7.6.47 - Options Export Leaks OAuth Secrets in Plaintext

  gVectors · wpDiscuz

  Medium6.9
• CVE-2026-22202

  wpDiscuz before 7.6.47 - Destructive GET Action Deletes All Comments by Email

  gVectors · wpDiscuz

  Medium6.1
• CVE-2026-22201

  wpDiscuz before 7.6.47 - IP Address Spoofing in getIP()

  gVectors · wpDiscuz

  Medium6.9
• CVE-2026-22193

  wpDiscuz before 7.6.47 - SQL Injection in getAllSubscriptions()

  gVectors · wpDiscuz

  Critical9.2
• CVE-2026-22183

  wpDiscuz before 7.6.47 - Stored Cross-Site Scripting in Inline Comment Preview

  gVectors · wpDiscuz

  Medium5.3