CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 8.1. See the original NVD description below for full technical details.
CVE
CVE-2026-22202
Severity
HIGH
CVSS
8.1
EPSS
0.17%
Original NVD Description
wpDiscuz before 7.6.47 contains a cross-site request forgery vulnerability that allows attackers to delete all comments associated with an email address by crafting a malicious GET request with a valid HMAC key. Attackers can embed the deletecomments action URL in image tags or other resources to trigger permanent deletion of comments without user confirmation or POST-based CSRF protection.
Related CVEs
Other vulnerabilities affecting the same vendor(s)