CyberRota Analysis
This is a low severity vulnerability with a CVSS score of 3.7. See the original NVD description below for full technical details.
CVE
CVE-2026-22204
Severity
LOW
CVSS
3.7
EPSS
0.22%
Original NVD Description
wpDiscuz before 7.6.47 contains an email header injection vulnerability that allows attackers to manipulate mail recipients by injecting malicious data into the comment_author_email cookie. Attackers can craft a malicious cookie value that, when processed through urldecode() and passed to wp_mail() functions, enables header injection to alter email recipients or inject additional headers.
Related CVEs
Other vulnerabilities affecting the same vendor(s)