A vulnerability classified as critical was found in Comments Plugin up to 7.6.39 on WordPress. Affected by this issue is some unknown functionality. The manipulation results in improper privilege management.
This vulnerability was named CVE-2025-13820. The attack may be performed from remote. There is no available exploit.
Upgrading the affected component is advised.
