gVectors Team Comments – wpDiscuz (WordPress plugin) vulnerabilities

Latest gVectors Team Comments – wpDiscuz (WordPress plugin) CVEs

Newest publication first

1. CVE-2022-43492 WordPress Comments – wpDiscuz plugin 7.4.2 - Auth. Insecure Direct Object References (IDOR) vulnerability

   Published 2022-11-18

   High·CVSS 8.8 EPSS 0.67%

   Auth. (subscriber+) Insecure Direct Object References (IDOR) vulnerability in Comments – wpDiscuz plugin 7.4.2 on WordPress.

2. CVE-2022-23984 WordPress wpDiscuz plugin <= 7.3.11 - Sensitive Information Disclosure

   Published 2022-02-21

   High·CVSS 7.5 EPSS 1.1%

   Sensitive information disclosure discovered in wpDiscuz WordPress plugin (versions <= 7.3.11).

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.