WordPress Plugin Vulnerabilities

Disqus <= 2.75 - Cross-Site Scripting (XSS) & CSRF

Description

The Disqus Comment System WordPress plugin was affected by a Cross-Site Scripting (XSS) & CSRF security vulnerability.

Affects Plugins

Plugin icon
disqus-comment-system
Fixed in 2.76

References

CVE
CVE-2014-5345
CVE
CVE-2014-5347
URL
https://gist.github.com/nikcub/cb5dc7a5464276c8424a

Miscellaneous

Submitter
admin
Verified
No
WPVDB ID
d0efe57b-ede3-4277-856d-61259785a884

Timeline

Publicly Published
2014-08-12 (about 11 years ago)
Added
2014-09-17 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2015-01-16
Title
CM Download Manager < 2.0.7 - CSRF to Cross-Site Scripting
Published
2019-08-03
Title
Rencontre < 3.2.2 - Authenticated Stored XSS via facebook parameter & SQL Injection
Published
2015-05-13
Title
Booking Calendar Contact Form <= 1.0.2 - Multiple Authenticated Vulnerabilities
Published
2018-03-14
Title
WooCommerce Products Filter < 1.2.0 - Multiple Issues
Published
2018-10-02
Title
Companion Auto Update <= 3.2.0 - CSRF & LFI