CVE-2022-0134: Bologer Anycomment

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

The AnyComment WordPress plugin before 0.2.18 does not have CSRF checks in the Import and Revert HyperComments features, allowing attackers to make logged in admin perform such actions via a CSRF attack

Affected products

• Bologer Anycomment: before 0.2.18 (fixed in 0.2.18)

Published 2022-02-21. Last modified 2026-06-17.