gvectors wpdiscuz vulnerabilities and exploits

(subscribe to this query)

10

CVSSv3

A Remote Code Execution vulnerability exists in the gVectors wpDiscuz plugin 7.0 up to and including 7.0.4 for WordPress, which allows unauthenticated users to upload any type of file, including PHP files via the wmuUploadFiles AJAX action.

Gvectors Wpdiscuz

7 Github repositories

9.8

CVSSv3

A SQL injection issue in the gVectors wpDiscuz plugin 5.3.5 and previous versions for WordPress allows remote malicious users to execute arbitrary SQL commands via the order parameter of a wpdLoadMoreComments request. (No 7.x versions are affected.)

Gvectors Wpdiscuz

8.8

CVSSv3

Cross-Site Request Forgery (CSRF) vulnerability in gVectors Team Comments — wpDiscuz plugin <= 7.6.11 versions.

Gvectors Wpdiscuz

8.8

CVSSv3

Auth. (subscriber+) Insecure Direct Object References (IDOR) vulnerability in Comments – wpDiscuz plugin 7.4.2 on WordPress.

Gvectors Wpdiscuz 7.4.2

7.5

CVSSv3

Sensitive information disclosure discovered in wpDiscuz WordPress plugin (versions <= 7.3.11).

Gvectors Wpdiscuz

6.5

CVSSv3

Authorization Bypass Through User-Controlled Key vulnerability in gVectors Team Comments – wpDiscuz.This issue affects Comments – wpDiscuz: from n/a up to and including 7.6.3.

Gvectors Wpdiscuz

6.1

CVSSv3

Unauth. Stored Cross-Site Scripting (XSS) vulnerability in gVectors Team Comments — wpDiscuz plugin <= 7.6.11 versions.

Gvectors Wpdiscuz

5.3

CVSSv3

The wpDiscuz plugin for WordPress is vulnerable to unauthorized modification of data due to a missing authorization check on the voteOnComment function in versions up to, and including, 7.6.3. This makes it possible for unauthenticated malicious users to increase or decrease the ...

Gvectors Wpdiscuz

5.3

CVSSv3

The wpDiscuz plugin for WordPress is vulnerable to unauthorized modification of data due to a missing authorization check on the userRate function in versions up to, and including, 7.6.3. This makes it possible for unauthenticated malicious users to increase or decrease the ratin...

Gvectors Wpdiscuz

4.8

CVSSv3

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gVectors Team Comments – wpDiscuz allows Stored XSS.This issue affects Comments – wpDiscuz: from n/a up to and including 7.6.12.

Gvectors Wpdiscuz

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook