Vulnerability history

Unauthenticated Stored Cross-Site Scripting vulnerability

Authenticated (Admin+) Stored Cross-Site Scripting vulnerability

WordPress Comments - wpDiscuz plugin < 7.6.40 - Unauthenticated Account Takeover vulnerability

Insecure Direct Object References (IDOR) vulnerability

Broken Access Control Vulnerability

Authentication Bypass vulnerability

Unauthenticated HTML Injection vulnerability

Cross Site Scripting (XSS) vulnerability

Authenticated (Author+) Stored Cross-Site Scripting via Uploaded Image Alternative Text vulnerability

Cross Site Scripting (XSS) vulnerability

Cross Site Request Forgery (CSRF) vulnerability

Cross Site Scripting (XSS) vulnerability

Insecure Direct Object References (IDOR) vulnerability

Content Injection vulnerability

Broken Access Control vulnerability

Broken Access Control vulnerability

Unauthenticated SQL Injection vulnerability

Insecure Direct Object Reference to Comment Rating Increase/Decrease vulnerability

Insecure Direct Object Reference to Post Rating Increase/Decrease vulnerability

Insecure Direct Object References (IDOR) vulnerability

Sensitive Information Disclosure

Cross-Site Request Forgery (CSRF) vulnerability leading to Arbitrary Comment Addition/Edition/Deletion

Stored Cross-Site Scripting (XSS) vulnerability

Unauthenticated Arbitrary File Upload vulnerability

Unauthenticated SQL Injection (SQLi) vulnerability

Cross-Site Request Forgery (CSRF) Vulnerability

Reflected Cross Site Scripting (XSS)