Approved changes feed: RSS · Atom

cpe:2.3:a:mg12:wp-recentcomments:2.0:*:*:*:*:*:*:*

part: a version: 2.0 update: *

VendorMg12 (bfa0d8b1-c4dd-547c-b07f-b6c37433a46f)
ProductWp Recentcomments (55948052-2a68-5ab5-82ad-9a8d72831349)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/wp-plugins/wp-recentcomments purl2cpe 2026-06-01 10:13:43.467301
pkg:github/wpplugins/wp-recentcomments purl2cpe 2026-06-01 10:13:43.467303

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-1068 vulnerable 2026-06-08 05:00:47.325850 Details available
Cross-site scripting (XSS) vulnerability in the rc_ajax function in core.php in the WP-RecentComments plugin before 2.0.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter, related to AJAX paging.
Published: 2012-02-14T17:00:00.000Z
Updated: 2024-08-06T18:45:27.106Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.