Advisories · Technology

Comments.

Every CVE that names Comments among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-19704 CVE record

CVSS 5.3 Medium

Comments – wpDiscuz < 7.6.66 - Unauthenticated Comment Disclosure via SQLi
- Comments
- SQL injection
Not analysed yet 2 Sept 2026
CVE-2026-15032 CVE record

CVSS 6.1 Medium

wpDiscuz < 7.6.60 - Unauthenticated Stored XSS via Image URL Conversion
- Comments
- Cross-site scripting (XSS)
Not analysed yet 7 Aug 2026
CVE-2025-13820 CVE record

CVSS 5.3 Medium

Comments – wpDiscuz < 7.6.40 - Unauthenticated Account Takeover
- Comments
Not analysed yet 1 Jan 2026