Known vulnerabilities in Unknown Comments
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-19704 | The Comments WordPress plugin before 7.6.66 does not validate a value used to build a database query, allowing… | 5.3 Medium | Sep 2, 2026 |
| CVE-2026-15032 | The Comments WordPress plugin before 7.6.60 does not properly escape a user-supplied URL before outputting it inside an… | 6.1 Medium | Aug 7, 2026 |
| CVE-2025-13820 | The Comments WordPress plugin before 7.6.40 does not properly validate user's identity when using the disqus.com… | 5.3 Medium | Jan 1, 2026 |