https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T18:37:18.320018+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-22202 CVE-2026-22202 — wpDiscuz before 7.6.47 - Destructive GET Action Deletes All Comments by Email 2026-10-07T18:37:18.340176+00:00

Affected: gVectors wpDiscuz

wpDiscuz before 7.6.47 contains a cross-site request forgery vulnerability that allows attackers to delete all comments associated with an email address by crafting a malicious GET request with a valid HMAC key. Attackers can embed the deletecomments action URL in image tags or other resources to trigger permanent deletion of comments without user confirmation or POST-based CSRF protection.