Disqus

3 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2014-5347 Aug 19, 19:55 MEDIUM POC PATCH This Month

Multiple cross-site request forgery (CSRF) vulnerabilities in the Disqus Comment System plugin before 2.76 for WordPress allow remote attackers to hijack the authentication of administrators for. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. Public exploit code available.

PHP WordPress XSS CSRF Wordpress Plugin +2

NVD Exploit-DB GitHub

CVSS 2.0

6.8

EPSS

3.0%

CVE-2014-5346 Aug 19, 19:55 MEDIUM POC This Month

Multiple cross-site request forgery (CSRF) vulnerabilities in the Disqus Comment System plugin 2.77 for WordPress allow remote attackers to hijack the authentication of administrators for requests. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

PHP WordPress CSRF Disqus Comment System Disqus

NVD Exploit-DB

CVSS 2.0

6.8

EPSS

0.2%

CVE-2014-5345 Aug 19, 19:55 MEDIUM POC PATCH This Month

Cross-site scripting (XSS) vulnerability in upgrade.php in the Disqus Comment System plugin before 2.76 for WordPress allows remote attackers to inject arbitrary web script or HTML via the step. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available.

PHP WordPress XSS Wordpress Plugin Disqus Comment System +1

NVD Exploit-DB

CVSS 2.0

4.3

EPSS

2.3%

CVE-2014-5347

EPSS 3% CVSS 6.8

MEDIUM POC PATCH This Month

PHP WordPress XSS +4

NVD Exploit-DB GitHub

CVE-2014-5346

EPSS 0% CVSS 6.8

MEDIUM POC This Month

PHP WordPress CSRF +2

NVD Exploit-DB

CVE-2014-5345

EPSS 2% CVSS 4.3

MEDIUM POC PATCH This Month

PHP WordPress XSS +3

NVD Exploit-DB