{"items":[{"id":"CVE-2026-119366","published":"2026-11-04T08:00:17.394Z","updated":"2026-11-04T20:00:58.355Z","title":"WordPress wpDiscuz plugin <= 7.6.73 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"AdvancedCoding","product":"wpDiscuz","kev":false,"epss":0.00146,"kevAdded":null},{"id":"CVE-2026-9148","published":"2026-07-03T06:50:12.154Z","updated":"2026-07-06T15:32:18.602Z","title":"Comments <= 7.6.56 - Unauthenticated Stored Cross-Site Scripting via 'Website' Field","severity":"HIGH","score":7.2,"vendor":"advancedcoding","product":"Comments – wpDiscuz","kev":false,"epss":0.00508,"kevAdded":null},{"id":"CVE-2025-68997","published":"2025-12-30T10:47:51.914Z","updated":"2026-04-28T20:13:29.020Z","title":"WordPress wpDiscuz plugin <= 7.6.43 - Insecure Direct Object References (IDOR) vulnerability","severity":"MEDIUM","score":5.3,"vendor":"AdvancedCoding","product":"wpDiscuz","kev":false,"epss":0.00342,"kevAdded":null},{"id":"CVE-2025-59591","published":"2025-09-22T18:25:46.381Z","updated":"2026-04-28T16:13:53.238Z","title":"WordPress wpDiscuz Plugin <= 7.6.33 - Broken Access Control Vulnerability","severity":"MEDIUM","score":4.3,"vendor":"AdvancedCoding","product":"wpDiscuz","kev":false,"epss":0.00207,"kevAdded":null},{"id":"CVE-2023-46309","published":"2025-01-02T12:00:17.479Z","updated":"2026-04-29T09:51:50.126Z","title":"WordPress wpDiscuz plugin <= 7.6.10 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"AdvancedCoding","product":"wpDiscuz","kev":false,"epss":0.00432,"kevAdded":null},{"id":"CVE-2023-45760","published":"2025-01-02T11:59:53.833Z","updated":"2026-04-29T09:51:48.859Z","title":"WordPress wpDiscuz plugin <= 7.6.3 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"AdvancedCoding","product":"wpDiscuz","kev":false,"epss":0.00521,"kevAdded":null},{"id":"CVE-2024-9488","published":"2024-10-25T05:35:29.077Z","updated":"2026-04-08T17:17:36.786Z","title":"Comments – wpDiscuz <= 7.6.24 - Authentication Bypass via WordPress.com OAuth provider","severity":"CRITICAL","score":9.8,"vendor":"advancedcoding","product":"Comments – wpDiscuz","kev":false,"epss":0.00811,"kevAdded":null},{"id":"CVE-2024-6704","published":"2024-08-02T10:59:33.380Z","updated":"2026-04-08T17:34:19.871Z","title":"Comments – wpDiscuz <= 7.6.21 - Unauthenticated HTML Injection","severity":"MEDIUM","score":5.3,"vendor":"advancedcoding","product":"Comments – wpDiscuz","kev":false,"epss":0.00596,"kevAdded":null},{"id":"CVE-2024-2477","published":"2024-04-23T13:50:40.649Z","updated":"2026-04-08T16:48:03.898Z","title":"wpDiscuz <= 7.6.15 - Authenticated (Author+) Stored Cross-Site Scripting via Uploaded Image Alternative Text","severity":"MEDIUM","score":6.4,"vendor":"advancedcoding","product":"Comments – wpDiscuz","kev":false,"epss":0.0034,"kevAdded":null},{"id":"CVE-2023-3869","published":"2023-10-20T07:29:28.812Z","updated":"2026-04-08T17:16:34.821Z","title":"wpDiscuz <= 7.6.3 - Insecure Direct Object Reference to Comment Rating Increase/Decrease","severity":"MEDIUM","score":5.3,"vendor":"advancedcoding","product":"Comments – wpDiscuz","kev":false,"epss":0.00483,"kevAdded":null},{"id":"CVE-2023-3998","published":"2023-10-20T07:29:24.732Z","updated":"2026-04-08T17:11:31.536Z","title":"wpDiscuz <= 7.6.3 - Insecure Direct Object Reference to Post Rating Increase/Decrease","severity":"MEDIUM","score":5.3,"vendor":"advancedcoding","product":"Comments – wpDiscuz","kev":false,"epss":0.00483,"kevAdded":null}]}