The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The DX Unanswered Comments plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7. This is due to missing nonce validation on the plugin's settings form in the dxuc-unanswered-comments-admin-page.php file. This makes it possible for unauthenticated attackers to modify plugin settings (dxuc_authors_list and dxuc_comment_count) via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Dx Unanswered Comments Plugin | — | Update dx-unanswered-comments plugin to version 1.8, or a newer patched version | Jul 9, 2026 | Apr 21, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub