AAdvancedCoding

Products

Exploited and recent CVEs

• CVE-2026-119366 High 7.1 WordPress wpDiscuz plugin <= 7.6.73 - Cross Site Scripting (XSS) vulnerability 0.1%
• CVE-2026-9148 High 7.2 Comments <= 7.6.56 - Unauthenticated Stored Cross-Site Scripting via 'Website' Field 0.5%
• CVE-2025-68997 Medium 5.3 WordPress wpDiscuz plugin <= 7.6.43 - Insecure Direct Object References (IDOR) vulnerability 0.3%
• CVE-2025-59591 Medium 4.3 WordPress wpDiscuz Plugin <= 7.6.33 - Broken Access Control Vulnerability 0.2%
• CVE-2023-46309 Medium 5.3 WordPress wpDiscuz plugin <= 7.6.10 - Broken Access Control vulnerability 0.4%
• CVE-2023-45760 Medium 4.3 WordPress wpDiscuz plugin <= 7.6.3 - Broken Access Control vulnerability 0.5%
• CVE-2024-9488 Critical 9.8 Comments – wpDiscuz <= 7.6.24 - Authentication Bypass via WordPress.com OAuth provider 0.8%
• CVE-2024-6704 Medium 5.3 Comments – wpDiscuz <= 7.6.21 - Unauthenticated HTML Injection 0.6%
• CVE-2024-2477 Medium 6.4 wpDiscuz <= 7.6.15 - Authenticated (Author+) Stored Cross-Site Scripting via Uploaded Image Alternative Text 0.3%
• CVE-2023-3869 Medium 5.3 wpDiscuz <= 7.6.3 - Insecure Direct Object Reference to Comment Rating Increase/Decrease 0.5%
• CVE-2023-3998 Medium 5.3 wpDiscuz <= 7.6.3 - Insecure Direct Object Reference to Post Rating Increase/Decrease 0.5%