Report: CVE-2026-22199 - WordPress wpDiscuz Cross-Site Request Forgery (CSRF) and Vote Manipulation Vulne...

Report: CVE-2026-22199 - WordPress wpDiscuz Cross-Site Request Forgery (CSRF) and Vote Manipulation Vulne...

CVE ID :CVE-2026-22199 Published : March 13, 2026, 6:19 a.m. | 1 hour, 58 minutes ago Description :wpDiscuz before 7.6.47 contains a vote manipulation vulnerability that allows attackers to manipulate comment votes by obtaining fresh nonces and bypassing rate limiting through client-controlled headers. Attackers can vary User-Agent headers to reset rate limits, request nonces from the unauthenticated wpdGetNonce endpoint, and vote multiple times using IP rotation or reverse proxy header manipulation. Severity: 5.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
MEDIUM
Published
March 13, 2026