7.1
High
CVE-2026-42749 Authentication Bypass Using an Alternate Path or Channel vulnerability in Themeisle Disable Comments for Any Post…
Description
Authentication Bypass Using an Alternate Path or Channel vulnerability in Themeisle Disable Comments for Any Post Types (Remove comments) comments-plus allows Password Recovery Exploitation.This issue affects Disable Comments for Any Post Types (Remove comments): from n/a through <= 1.3.0.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Disable Comments for Any Post Types (Remove comments) 1.3 | earliest → 1.3.0 | No fix stated |