WordPress Plugin Vulnerabilities

Disable Comments 1.0.3 - disable_comments_settings.php Comment Status Manipulation CSRF

Description

The Disable Comments WordPress plugin was affected by a disable_comments_settings.php Comment Status Manipulation CSRF security vulnerability.

Affects Plugins

Plugin icon
disable-comments
Fixed in 1.0.4

References

CVE
CVE-2014-2550

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352
CVSS
8.8 (high)

Miscellaneous

Verified
No
WPVDB ID
9d031532-6c54-4a16-bc6e-656761c9cde6

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2026-04-07
Title
BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net < 1.1.6 - Cross-Site Request Forgery to Taxonomy Term Deletion
Published
2023-05-24
Title
Download < 1.1.0 - Cross-Site Request Forgery
Published
2024-01-23
Title
aBitGone CommentSafe <= 1.0.0 - Settings Update to Stored XSS via CSRF
Published
2024-07-01
Title
Ashe < 2.234 - Cross-Site Request Forgery to Notice Dismissal
Published
2025-03-24
Title
Easy 301 Redirects <= 1.33 - Cross-Site Request Forgery