CVE-2026-22182

A flaw in wpDiscuz versions prior to 7.6.47 allows unauthenticated users to cause a denial of service by triggering excessive notification emails. This is achieved through repeated calls to the wpdiscuz-ajax.php endpoint with manipulated postId and comment_id values, which are not properly validated or limited. As a result, subscribers can be overwhelmed with notifications due to the lack of nonce verification and rate limiting in the affected function.

Based on public CVE data (MITRE/NVD).