Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
wpDiscuz before 7.6.47 contains a missing rate limiting vulnerability that allows unauthenticated attackers to subscribe arbitrary email addresses to post notifications by sending POST requests to the wpdAddSubscription handler in class.WpdiscuzHelperAjax.php. Attackers can exploit LIKE wildcard characters in the subscription query to match multiple email addresses and generate unwanted notification emails to victim accounts.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-22216 wpDiscuz before 7.6.47 contains a missing rate limiting vulnerability that allows unauthenticated attackers to subscribe arbitrary email addresses to post notificatio… https://www.cve.org/CVERecord?id=CVE-2026-22216
Post summary
The tweet announces CVE-2026-22216, describing a missing rate limiting flaw that lets unauthenticated users subscribe any email address to post notifications; no PoC, exploit, or patch is mentioned.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-22216 - WordPress Discuz Unauthenticated Email Notification Subscription Vulnerability Intel Report: https://ift.tt/76saOyu
Post summary
The tweet alerts to CVE‑2026‑22216, labeling it as an unauthenticated email notification subscription vulnerability, but provides no additional technical details, PoC, or exploitation information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | gvectors | wpdiscuz | - | wordpress | - |