Simple Comment Editing
Simple Comment Editing has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; all 2 are fixed as of October 2026. Their average CVSS score is 5.4, and the most serious one scores 5.5 out of 10. 2025 was the busiest year with 2 disclosures.
The most common weakness is Exposure Of Sensitive Information To An Unauthorized Actor, behind 1 of the records (50%). Other recurring categories include Server-Side Request Forgery (SSRF).
Every one of the 2 issues recorded for Simple Comment Editing has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. Simple Comment Editing is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.
CVE-2025-24703Comment Edit Core – Simple Comment Editing <= 3.0.33 - Authenticated (Admin+) Server-Side Request Forgery
Read the full analysisVulnerability Records
Simple Comment Editing
Author
David Stone
Allow your users to edit their comments and WooCommerce reviews for a period of time. Getting Started | Simple Comment Editing on GitHub Simple Comment Editing features Install the plugin. That’s it. It just works. Anonymous users can edit comments for 5 minutes. No styling is necessary. For advanced customization, see the “Other Notes” section. Advanced customization can be achieved using filters. Add Mailchimp to your comment form and get email subscribers through comments.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C