CVE-2026-19704 | Comments Plugin up to 7.6.65 on WordPress sql injection

September 2, 2026 Yanac

A vulnerability, which was classified as critical, was found in Comments Plugin up to 7.6.65 on WordPress. The affected element is an unknown function. Executing a manipulation can lead to sql injection.

This vulnerability appears as CVE-2026-19704. The attack may be performed from remote. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More