CVE · Critical
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2020-13640 | Comments – wpDiscuz [wpdiscuz] < 5.3.6 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | Critical 9.8 | < 5.3.6 | 5.3.6 | 2020-06-12 | — |
The wpDiscuz plugin up to version 5.3.5 contains a SQL injection vulnerability in the order parameter of wpdLoadMoreComments requests, which enables unauthenticated attackers to run arbitrary SQL queries. This flaw does not impact any version 7.x releases of the plugin.
Based on public CVE data (MITRE/NVD).
No signup, no credit card — enter your URL and get a security report in seconds.