wpDiscuz < 5.3.5 - SQL Injection via wpdLoadMoreComments Order Parameter
A SQL injection issue in the gVectors wpDiscuz plugin 5.3.5 and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the order parameter of a wpdLoadMoreComments request. (No 7.x versions are affected.)