CVE Intelligence

Alexander AnyComment vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Alexander AnyComment: 3 record(s), with affected versions and fixes.

CVE-2025-62874 Medium · 4.3 CWE-862 Dec 31, 2025
WordPress AnyComment plugin <= 0.3.6 - Broken Access Control vulnerability
Missing Authorization vulnerability in Alexander AnyComment anycomment allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AnyComment: from n/a through <= 0.3.6.
CVE-2025-60240 High · 7.5 CWE-98 Nov 6, 2025
WordPress AnyComment plugin <= 0.3.6 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Alexander AnyComment anycomment allows PHP Local File Inclusion.This issue affects AnyComment: from n/a through <= 0.3.6.
CVE-2025-48091 High · 8.5 CWE-89 Oct 22, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Alexander AnyComment anycomment allows SQL Injection.This issue affects AnyComment: from n/a through <= 0.3.6.