Comments – wpDiscuz
Comments – wpDiscuz has 27 disclosed vulnerabilities in the WordSec catalog, reported between 2016 and 2026; all 27 are fixed as of September 2026. Their average CVSS score is 6.0, and the most serious one scores 9.8 out of 10. Severity breakdown: 3 critical and 5 high. 2023 was the busiest year with 10 disclosures.
The most common weakness is Cross-Site Scripting, behind 9 of the records (33%). Other recurring categories include Authorization Bypass Through User-Controlled Key, Missing Authorization.
Every one of the 27 issues recorded for Comments – wpDiscuz has a vendor fix available, so running the current release closes all known holes.
19 independent researchers contributed these findings, most of them (5) reported by R3N0. Comments – wpDiscuz is installed on roughly 60,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2024-9488Comments – wpDiscuz <= 7.6.24 - Authentication Bypass via WordPress.com OAuth provider
Read the full analysisVulnerability Records

Comments – wpDiscuz
Author
AdvancedCoding
wpDiscuz transforms the native WordPress comment system into a fast, modern, and interactive discussion experience while keeping your comments and data in your own WordPress database. Add AJAX comments, live comments, threaded comments, comment voting and rating, inline comments, comment subscriptions, social login, custom comment forms, lazy loading, and modern engagement features without moving your community to an external commenting service. wpDiscuz is a powerful Disqus alternative for WordPress and is designed for blogs, news websites, magazines, communities, membership sites, and WooCommerce stores. wpDiscuz Demo: https://wpdiscuz.com/ Documentation: https://wpdiscuz.com/docs/ Support Forum: https://wpdiscuz.com/community/ GDPR Information: https://wpdiscuz.com/gdpr/ wpDiscuz Add-ons: https://wpdiscuz.com/addons/ AJAX Comments Enable fast AJAX-powered WordPress comments with instant comment posting, smooth interactions, and updates without unnecessary page reloads. Live Comments Create a more dynamic discussion experience with live comment updates, live notifications, and real-time comment bubble updates. Threaded Comments and Replies Organize discussions with multi-level threaded comments, nested replies, and reply controls that make long conversations easier to follow. Comment Voting and Rating Increase community interaction with positive and negative comment voting, comment rating, and post rating features. Inline Comments and Feedback Let visitors comment directly on post content and provide inline feedback without relying only on the main comment form. Comment Subscriptions and Notifications Allow users to subscribe to comments and discussion updates and receive notifications about new activity, replies, and approved comments. Custom WordPress Comment Forms Create custom comment forms and custom fields for different post types, products, pages, communities, and discussions. Social Login and Social Comments Allow visitors to comment using supported social login providers for a faster and more convenient commenting experience. WooCommerce Comments and Reviews Improve WooCommerce product discussions with AJAX-powered product comments, ratings, and engagement features. Advanced WooCommerce review and rating functionality is available with the wpDiscuz – Reviews add-on. Performance and Lazy Loading wpDiscuz is optimized for performance with lazy-loaded comments, built-in caching, AJAX posting, Gravatar caching, and a performance-focused architecture. Disqus Alternative for WordPress Replace Disqus, Jetpack Comments, and other third-party comment systems while keeping full ownership of your comments and storing them in the native WordPress comment database. More wpDiscuz Features Three modern WordPress comment layouts Comment sorting by newest, oldest, and most voted comments Comment editing for logged-in users and guests Automatic URL and image embedding in comments Long comment collapsing with “Read More” button WordPress date format integration Quick Tags support for comments Highlighting new comments since last visit Comment access control by user roles Option to load all comments on first page load Built-in Gravatar caching Sticky comments support Closed comment threads support User follow functionality Built-in comment and author caching system Responsive interface for desktop and mobile devices wpDiscuz Add-ons Extend wpDiscuz with optional add-ons for advanced reviews and ratings, media uploads, user notifications, front-end moderation, subscriptions, comment search, private comments, BuddyPress integration, GIPHY integration, voice commenting, and more. Browse wpDiscuz Add-ons wpDiscuz Add-ons Bundle
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C