WordPress plugin
Comment Info Detector security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium1
- Low0
All Comment Info Detector vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.3 | Cross-Site Request Forgery to Settings Update ≤1.0.5No patch available | CVE-2025-10311 |
- Medium4.3Cross-Site Request Forgery to Settings Update
≤1.0.5No patch available
Comment Info Detector: common questions
Does Comment Info Detector have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in Comment Info Detector: 1 medium. At least one is not fixed in the latest version.
How do I check which version of Comment Info Detector I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Comment Info Detector vulnerability?
CVE-2025-10311, published Oct 2, 2025: Comment Info Detector <= 1.0.5 - Cross-Site Request Forgery to Settings Update. Severity: Medium (CVSS 4.3).
Is any Comment Info Detector vulnerability listed in CISA KEV?
No. None of the known Comment Info Detector vulnerabilities is currently listed in the CISA KEV catalog.