CVE Database /
CVE-2026-22215
CVE · Medium
CVE-2026-22215 — Comments – wpDiscuz [wpdiscuz] < 7.6.47
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2026-22215
|
Comments – wpDiscuz [wpdiscuz] < 7.6.47 |
Cross-Site Request Forgery (CSRF) |
Medium
5.4
|
< 7.6.47
|
7.6.47 |
2026-03-13 |
—
|
CVE-2026-22215
wpDiscuz versions prior to 7.6.47 are susceptible to a cross-site request forgery vulnerability within the getFollowsPage() function, allowing attackers to execute unauthorized actions without proper nonce validation. This flaw enables malicious requests that can enumerate follow relationships and manipulate user follow data due to the lack of CSRF protection in the follows page handler.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings