wpDiscuz
- Software type
- Other
- Total vulnerabilities (90 days)
- 1
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/04/2026, wpDiscuz recorded 1 security vulnerability in the last 90 days, of which 1 is rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of wpDiscuz and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-119366WordPress wpDiscuz plugin <= 7.6.73 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-68997WordPress wpDiscuz plugin <= 7.6.43 - Insecure Direct Object References (IDOR) vulnerabilityCVE-2025-59591WordPress wpDiscuz Plugin <= 7.6.33 - Broken Access Control VulnerabilityCVE-2023-46309WordPress wpDiscuz plugin <= 7.6.10 - Broken Access Control vulnerabilityCVE-2023-45760WordPress wpDiscuz plugin <= 7.6.3 - Broken Access Control vulnerability| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-119366WordPress wpDiscuz plugin <= 7.6.73 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Published11/04/2026 | SeverityHigh |
CVE-2025-68997WordPress wpDiscuz plugin <= 7.6.43 - Insecure Direct Object References (IDOR) vulnerability | Exploitation statusNot exploited | FixYes | Published12/30/2025 | SeverityMedium |
CVE-2025-59591WordPress wpDiscuz Plugin <= 7.6.33 - Broken Access Control Vulnerability | Exploitation statusNot exploited | FixYes | Published09/22/2025 | SeverityMedium |
CVE-2023-46309WordPress wpDiscuz plugin <= 7.6.10 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Published01/02/2025 | SeverityMedium |
CVE-2023-45760WordPress wpDiscuz plugin <= 7.6.3 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Published01/02/2025 | SeverityMedium |
5 Results | Page 1 of 1