AI Search

Classic Search

Search Phrase:

Search Type:

Advanced search options

Search in Forums:

Search in date period:

Sort Search Results by:

AI Assistant

Notifications

Clear all

Bug [Solved] Unauthenticated Insecure Direct Object Reference

✦ Summarize Topic

Bug Reports

Last Post by Tom 2 months ago

5 Posts

4 Users

0 Reactions

410 Views

RSS

SKKK

(@skkk)

Posts: 2

Active Member

Topic starter

Translate ▼

[#11199]

wpDiscuz plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 7.6.42 due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to perform unauthorized actions.

References

vdp.patchstack.com

Posted : 09/01/2026 10:46 am

Topic Tags

security

Tom

(@tomson)

Posts: 512

Honorable Member Support

Translate ▼

Hi @skkk,

Please leave my reply here: https://wpdiscuz.com/community/postid/29801/

Posted : 09/01/2026 10:59 am

Asti

(@asti)

Posts: 8264

Illustrious Member Support

Translate ▼

Please update the wpDiscuz to the latest version (v7.6.43) and check if the issue persists.

In case you want to say thank you! 🙂
We'd really appreciate if you leave a good review on the plugin page.
This is the best way to say thank you to this project and the support team.

Posted : 12/01/2026 12:34 pm

Hashtag

(@hashtag)

Posts: 5

Active Member

Translate ▼

@asti Issue still persists with JetPack, for me. Seems like WordFence is triggering the report that JetPack references? Hopefully you guys can get them to update on their end, if the current version fixes the issue.