CVE-2022-23984 LOW

CVE-2022-23984: WordPress wpDiscuz plugin <= 7.3.11 - Sensitive Information Disclosure

Vendor Gvectors Team
Product Comments – wpDiscuz (WordPress plugin)
Weakness CWE-200 · Info exposure
Published February 21, 2022
Last update April 28, 2026

CVSS base score

3.7/10
Attack vector Network
Attack complexity High
Privileges required None
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

Sensitive information disclosure discovered in wpDiscuz WordPress plugin (versions <= 7.3.11).

Key dates

02Disclosure timeline

February 21, 2022 CVE published
April 28, 2026 Record updated