Skip to content

Vendor

disqus vulnerabilities

3 published CVES affecting disqus, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
0
High
0
Medium
3
Low
0
Unscored
0
CISA KEV
0
Atom feed of disqus alerts

Products

Latest disqus CVEs

Newest publication first

  2. CVE-2014-5346 Disqus Comment System < 2.79 - Multiple Cross-Site Request Forgery

    Published
    MediumCVSS 6.8 EPSS 2.7% Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in the Disqus Comment System plugin 2.77 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) activate or (2) deactivate the plugin via the active parameter to wp-admin...

  3. CVE-2014-5347 Disqus Comment System < 2.76 - Cross-Site Request Forgery

    Published
    MediumCVSS 6.8 EPSS 4.9% Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in the Disqus Comment System plugin before 2.76 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the (1) disqus_replace,...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.