plugin
8 known security issues reported for the Wp Recentcomments WordPress plugin. Most recent disclosed Dec 9, 2024.
Running Wp Recentcomments on your site? Check whether your installed version is affected.
Scan your site free[en] Missing Authorization vulnerability in mg12 WP-RecentComments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP-RecentComments: from n/a through 2.2.7.
No patched version available. WordFence discovered and reported this Sensitive Data Exposure vulnerability in WordPress WP-RecentComments Plugin. This vulnerability has not been known to be fixed yet.
The WP-RecentComments plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.2.7. This can allow unauthenticated attackers to extract sensitive data including comments on posts even if the posts themselves are not visible to the user. The plugin uses the `init` hook for...
The WP-RecentComments plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.2.7. This can allow unauthenticated attackers to extract sensitive data including comments on posts even if the posts themselves are not visible to the user. The plugin uses the `init` hook for...
[en] SQL injection vulnerability in the WP-RecentComments plugin 2.0.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter in an rc-content action to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
[en] Cross-site scripting (XSS) vulnerability in the rc_ajax function in core.php in the WP-RecentComments plugin before 2.0.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter, related to AJAX paging.
SQL injection vulnerability in the WP-RecentComments plugin 2.0.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter in an rc-content action to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Cross-site scripting (XSS) vulnerability in the rc_ajax function in core.php in the WP-RecentComments plugin before 2.0.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter, related to AJAX paging.
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free