WordPress Plugin Vulnerabilities

Disqus Blog Comments < 2.7.8 - Blind SQL Injection

Description

The Disqus Comment System WordPress plugin was affected by a Blind SQL Injection security vulnerability.

Affects Plugins

Plugin icon
disqus-comment-system
Fixed in 2.7.8

References

Exploitdb
20913

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
7abdf114-6bdc-4601-820f-4a6f6869bea0

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2021-10-11
Title
WCFM - Frontend Manager for WooCommerce < 6.5.12 - Customer/Subscriber+ SQL Injection
Published
2014-08-01
Title
Simple Retail Menus 4.0.1 - includes/actions.php targetmenu Parameter SQL Injection
Published
2015-04-14
Title
WP Symposium < 15.4 - SQL Injection
Published
2014-08-01
Title
Mingle Forum <= 1.0.31 - SQL Injection
Published
2018-02-22
Title
WP Fastest Cache <= 0.8.7.4 - Blind SQL Injection