Plugin icon

AnyComment

anycomment

Vulnerabilities:

8

Last Updated:

May 14, 2022

Active Installs:

4000

Published
Title
Fixed in
CVSS
Published
2025-12-31
Title
AnyComment <= 0.3.6 - Missing Authorization
Fixed in
No known fix
CVSS
4.3 (medium)
Published
2025-10-08
Title
AnyComment <= 0.3.6 - Authenticated (Subscriber+) SQL Injection
Fixed in
No known fix
CVSS
6.5 (medium)
Published
2025-07-12
Title
AnyComment <= 0.3.6 - Unauthenticated Local File Inclusion
Fixed in
No known fix
CVSS
8.1 (high)
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 0.0.99
CVSS
6.1 (medium)
Published
2022-01-19
Title
AnyComment < 0.2.18 - Comment Rating Increase/Decrease via Race Condition
Fixed in
Fixed in 0.2.18
CVSS
3.1 (low)
Published
2022-01-19
Title
AnyComment < 0.2.18 - Arbitrary HyperComments Import/Revert via CSRF
Fixed in
Fixed in 0.2.18
CVSS
5.4 (medium)
Published
2021-12-20
Title
AnyComment < 0.3.5 - Open Redirect
Fixed in
Fixed in 0.3.5
CVSS
4.3 (medium)
Published
2018-07-16
Title
Anycomment < 0.0.33 - XSS
Fixed in
Fixed in 0.0.33
CVSS
6.1 (medium)