All products

anycomment

WordPress · Plugin
8 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
AnyComment <= 0.3.6 - Unauthenticated Stored Cross-Site Scripting via 'email' ParameterCVE-2026-103422 anycomment WordPress High No fix reported
AnyComment <= 0.3.6 - Missing AuthorizationCVE-2025-62874 anycomment WordPress Medium No fix reported
AnyComment <= 0.3.6 - Unauthenticated Local File InclusionCVE-2025-60240 anycomment WordPress High No fix reported
AnyComment <= 0.3.6 - Authenticated (Subscriber+) SQL InjectionCVE-2025-48091 anycomment WordPress Medium No fix reported
AnyComment <= 0.2.17 - Cross-Site Request ForgeryCVE-2022-0134 anycomment WordPress High Fix reported
AnyComment <= 0.0.32 - Cross-Site ScriptingCVE-2018-21001 anycomment WordPress Medium Fix reported
AnyComment <= 0.2.17 - Race ConditionCVE-2022-0279 anycomment WordPress Medium Fix reported
AnyComment <= 0.3.4 - Open Redirect via redirect parameterCVE-2021-24838 anycomment WordPress Medium Fix reported