Software intelligence
Important: Wpdiscuz appearing in this catalog does not mean your website is affected. Exposure depends on your installed version. How SiteRespond intelligence works
Tracked advisories
26
Latest advisory
2 July 2026
CISA KEV matches
0
In this WordPress feed
WordPress slug
wpdiscuz
Plugin
This catalog lists 26 known advisories affecting Wpdiscuz. The most recent was published on 2 July 2026. If you use this software, compare your installed version against the affected ranges on each advisory and update to a fixed release outside those ranges. SiteRespond Defence checks your actual installed version when the plugin is connected — listing here does not by itself mean your site is vulnerable.
Comments <= 7.6.56 - Unauthenticated Stored Cross-Site Scripting via 'Website' Field
May allow attackers to run scripts in visitors' browsers or hijack admin sessions.
Published 2 July 2026
Comments – wpDiscuz <= 7.6.46 - Authenticated (Admin+) Stored Cross-Site Scripting
May allow attackers to run scripts in visitors' browsers or hijack admin sessions.
Published 12 March 2026
wpDiscuz <= 7.6.42 - Unauthenticated Insecure Direct Object Reference
This advisory describes a other issue in the affected software. Review the source advisory and your installed version to assess exposure.
Published 25 December 2025
Known Wpdiscuz advisories published by month.
CVE-2026-9148 · Published 2 July 2026
Affected versions: ≤ 7.6.56
CVE-2026-22209 · Published 12 March 2026
Affected versions: ≤ 7.6.46
CVE-2025-68997 · Published 25 December 2025
Affected versions: ≤ 7.6.42
CVE-2025-13820 · Published 11 December 2025
Affected versions: ≤ 7.6.39
CVE-2025-59591 · Published 22 September 2025
Affected versions: ≤ 7.6.33
CVE-2024-9488 · Published 24 October 2024
Affected versions: ≤ 7.6.24
CVE-2024-6704 · Published 1 August 2024
Affected versions: ≤ 7.6.21
CVE-2024-35681 · Published 6 June 2024
Affected versions: ≤ 7.6.18
CVE-2024-2477 · Published 22 April 2024
Affected versions: ≤ 7.6.15
CVE-2023-51691 · Published 17 November 2023
Affected versions: ≤ 7.6.12
CVE-2023-47775 · Published 14 November 2023
Affected versions: ≤ 7.6.11
CVE-2023-47185 · Published 31 October 2023
Affected versions: ≤ 7.6.11
CVE-2023-46310 · Published 22 October 2023
Affected versions: ≤ 7.6.10
CVE-2023-46311 · Published 22 October 2023
Affected versions: ≤ 7.6.3
CVE-2023-46309 · Published 20 October 2023
Affected versions: ≤ 7.6.10
SiteRespond Defence matches your installed Wpdiscuz version against this catalog when the Defence plugin is connected to your WordPress site.