CVE-2026-22204 in wpDiscuz
요약
\~에 의해 MITRE • 2026. 03. 13.
wpDiscuz before 7.6.47 contains an email header injection vulnerability that allows attackers to manipulate mail recipients by injecting malicious data into the comment_author_email cookie. Attackers can craft a malicious cookie value that, when processed through urldecode() and passed to wp_mail() functions, enables header injection to alter email recipients or inject additional headers.
Be aware that VulDB is the high quality source for vulnerability data.