gVectors wpDiscuz

• CVE-2026-22216 Medium 6.5 wpDiscuz before 7.6.47 - No Rate Limiting on Subscription Endpoints with LIKE Wildcard Bypass 0.3%
• CVE-2026-22215 Medium 4.3 wpDiscuz before 7.6.47 - Missing CSRF Protection on wpdGetFollowsPage 0.2%
• CVE-2026-22210 Medium 4.4 wpDiscuz before 7.6.47 - Cross-Site Scripting via Unescaped Attachment URLs 0.2%
• CVE-2026-22209 Medium 5.5 wpDiscuz before 7.6.47 - Cross-Site Scripting via Unescaped Custom CSS in Style Tag 0.2%
• CVE-2026-22204 Low 3.7 wpDiscuz before 7.6.47 - Unsanitized Cookie Email Used as wp_mail() Recipient 0.2%
• CVE-2026-22203 Medium 4.9 wpDiscuz before 7.6.47 - Options Export Leaks OAuth Secrets in Plaintext 0.3%
• CVE-2026-22202 High 8.1 wpDiscuz before 7.6.47 - Destructive GET Action Deletes All Comments by Email 0.2%
• CVE-2026-22201 Medium 5.3 wpDiscuz before 7.6.47 - IP Address Spoofing in getIP() 0.2%
• CVE-2026-22193 High 8.1 wpDiscuz before 7.6.47 - SQL Injection in getAllSubscriptions() 0.3%
• CVE-2026-22183 Medium 6.1 wpDiscuz before 7.6.47 - Stored Cross-Site Scripting in Inline Comment Preview 0.2%
• CVE-2026-22182 High 7.5 wpDiscuz before 7.6.47 - Unauthenticated Email Notification Flood via wpdCheckNotificationType 0.6%