github - ghsa-77g2-3gj2-8h4q

ghsa-77g2-3gj2-8h4q

Vulnerability from github

Published

2026-01-01 06:30

Modified

2026-01-01 06:30

Details

The Comments WordPress plugin before 7.6.40 does not properly validate user's identity when using the disqus.com provider, allowing an attacker to log in to any user (when knowing their email address) when such user does not have an account on disqus.com yet.

Show details on source website

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2025-13820"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-01-01T06:15:45Z",
    "severity": null
  },
  "details": "The Comments  WordPress plugin before 7.6.40 does not properly validate user\u0027s identity when using the disqus.com provider, allowing an attacker to log in to any user (when knowing their email address) when such user does not have an account on disqus.com yet.",
  "id": "GHSA-77g2-3gj2-8h4q",
  "modified": "2026-01-01T06:30:23Z",
  "published": "2026-01-01T06:30:23Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13820"
    },
    {
      "type": "WEB",
      "url": "https://wpscan.com/vulnerability/21bc9b41-a967-42dc-9916-bb993b05709c"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

CVE-2025-13820 (GCVE-0-2025-13820)

Vulnerability from cvelistv5

Published

2026-01-01 06:00

Modified

2026-01-01 06:00

Severity ?

CWE

CWE-269 Improper Privilege Management

Summary

The Comments WordPress plugin before 7.6.40 does not properly validate user's identity when using the disqus.com provider, allowing an attacker to log in to any user (when knowing their email address) when such user does not have an account on disqus.com yet.

References

URL

Tags

https://wpscan.com/vulnerability/21bc9b41-a967-42dc-9916-bb993b05709c/

exploit, vdb-entry, technical-description

Impacted products

	Vendor	Product	Version
	Unknown	Comments	Version: 0 ≤

Show details on NVD website

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Comments",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "7.6.40",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "wcraft"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "WPScan"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Comments  WordPress plugin before 7.6.40 does not properly validate user\u0027s identity when using the disqus.com provider, allowing an attacker to log in to any user (when knowing their email address) when such user does not have an account on disqus.com yet."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-269 Improper Privilege Management",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-01-01T06:00:03.091Z",
        "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
        "shortName": "WPScan"
      },
      "references": [
        {
          "tags": [
            "exploit",
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://wpscan.com/vulnerability/21bc9b41-a967-42dc-9916-bb993b05709c/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Comments \u2013 wpDiscuz \u003c 7.6.40 - Unauthenticated Account Takeover",
      "x_generator": {
        "engine": "WPScan CVE Generator"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
    "assignerShortName": "WPScan",
    "cveId": "CVE-2025-13820",
    "datePublished": "2026-01-01T06:00:03.091Z",
    "dateReserved": "2025-12-01T10:12:16.300Z",
    "dateUpdated": "2026-01-01T06:00:03.091Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Log in or create an account to share your comment.

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.