Discy - Social Questions and Answers WordPress Theme

Discy - Social Questions and Answers WordPress Theme has 4 disclosed vulnerabilities in the WordSec catalog, all reported in 2022; 3 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 7.0, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 2 high. 2022 was the busiest year with 4 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 2 of the records (50%). Other recurring categories include Authorization Bypass Through User-Controlled Key, Missing Authorization.

3 of the records (75%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2022.

4 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSHigh

7.0/ 10

Patch Coverage75%

Open

Fixed

Get automatic notifications for all Discy - Social Questions and Answers WordPress Theme vulnerabilities before they are exploited.

Most severe open issueCVSS 4.3CVE-2022-3343

WPQA - Builder forms Addon For WordPress (<= 5.9.2), Himer (<= 1.9.3) and Discy (<= 5.5.3) - Authenticated (Subscriber+) Insecure Direct Object Reference

Read the full analysis

Vulnerability Records

4 records


2022-12-13 00:00	WPQA - Builder forms Addon For WordPress (<= 5.9.2), Himer (<= 1.9.3) and Discy (<= 5.5.3) - Authenticated (Subscriber+) Insecure Direct Object Reference Discy - Social Questions and Answers… <= 5.5.3	`CVE-2022-3343`	4.3 Medium	Harsh Tandel	No
2022-07-12 00:00	Discy - Social Questions and Answers WordPress Theme <= 4.9 - Missing Authorization Discy - Social Questions and Answers… <= 4.9	`CVE-2022-1323`	6.3 Medium	Veshraj Ghimire	Yes
2022-05-16 00:00	Discy <= 5.1 - Cross-Site Request Forgery to Settings Update Discy - Social Questions and Answers… < 5.2	`CVE-2022-1421`	8.8 High	Bibek Neupane	Yes
2022-05-16 00:00	Discy <= 5.1 - Cross-Site Request Forgery to Settings Reset Discy - Social Questions and Answers… < 5.2	`CVE-2022-1422`	8.8 High	Bikram Kharal (themarkib)	Yes

Showing 1–4 of 4 reports