Vulnerabilities

TI-2026-12237 CVE-2026-14482 · GHSA-mc85-hq4f-frgp

多说社会化评论框 <= 1.2 - Unauthenticated Privilege Escalation via api.php 'option'/'value' Parameters

MEDIUM 41

The 多说社会化评论框 plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00587 Published 2026-07-08 No fix listed CWE-269

TI-2025-30644 CVE-2025-48318 · GHSA-rpjr-9cr2-6gqx

WordPress 多说社会化评论框 plugin <= 1.2 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in shen2 多说社会化评论框 duoshuo allows Cross Site Request Forgery.This issue affects 多说社会化评论框: from n/a through <= 1.2.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0014 Published 2025-08-28 No fix listed CWE-352

TI-2025-31171 CVE-2025-49056 · GHSA-2q48-8wh9-4hjx

WordPress 多说社会化评论框 Plugin <= 1.2 - Cross Site Scripting (XSS) Vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in shen2 多说社会化评论框 duoshuo allows Reflected XSS.This issue affects 多说社会化评论框: from n/a through <= 1.2.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00249 Published 2025-08-14 No fix listed CWE-79

Vulnerabilities

Filters

多说社会化评论框 <= 1.2 - Unauthenticated Privilege Escalation via api.php 'option'/'value' Parameters

WordPress 多说社会化评论框 plugin <= 1.2 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

WordPress 多说社会化评论框 Plugin <= 1.2 - Cross Site Scripting (XSS) Vulnerability