Aller au contenu
Se connecter
5.3 Moyenne

CVE-2025-13820 The Comments WordPress plugin before 7.6.40 does not properly validate user's identity when using the disqus.com…

Description

The Comments WordPress plugin before 7.6.40 does not properly validate user's identity when using the disqus.com provider, allowing an attacker to log in to any user (when knowing their email address) when such user does not have an account on disqus.com yet.

Produits et versions touchés

Produit Versions touchées Corrigé en
Comments 7.6 premières → < 7.6.40 7.6.40

Autres CVE de Comments

Les 3 CVE de Comments →
CVE-2026-19704 The Comments WordPress plugin before 7.6.66 does not validate a value used to build a database query, allowing… 5.3 Moyenne CVE-2026-15032 The Comments WordPress plugin before 7.6.60 does not properly escape a user-supplied URL before outputting it inside an… 6.1 Moyenne
Suivre cette CVE