CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-5347

Multiple cross-site request forgery (CSRF) vulnerabilities in the Disqus Comment System plugin before 2.76 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the (1) disqus_replace, (2) disqus_public_key, or (3) disqus_secret_key parameter to wp-admin/edit-comments.php in manage.php or that (4) reset or (5) delete plugin options via the reset parameter to wp-admin/edit-comments.php.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.031

EPSS Ranking 86.4%

CVSS Severity

CVSS v2 Score 6.8

References

Products affected by CVE-2014-5347

Disqus » Disqus Comment System » Version: 2.40

cpe:2.3:a:disqus:disqus_comment_system:2.40
Disqus » Disqus Comment System » Version: 2.41

cpe:2.3:a:disqus:disqus_comment_system:2.41
Disqus » Disqus Comment System » Version: 2.42

cpe:2.3:a:disqus:disqus_comment_system:2.42
Disqus » Disqus Comment System » Version: 2.43

cpe:2.3:a:disqus:disqus_comment_system:2.43
Disqus » Disqus Comment System » Version: 2.44

cpe:2.3:a:disqus:disqus_comment_system:2.44
Disqus » Disqus Comment System » Version: 2.45

cpe:2.3:a:disqus:disqus_comment_system:2.45
Disqus » Disqus Comment System » Version: 2.46

cpe:2.3:a:disqus:disqus_comment_system:2.46
Disqus » Disqus Comment System » Version: 2.47

cpe:2.3:a:disqus:disqus_comment_system:2.47
Disqus » Disqus Comment System » Version: 2.48

cpe:2.3:a:disqus:disqus_comment_system:2.48
Disqus » Disqus Comment System » Version: 2.49

cpe:2.3:a:disqus:disqus_comment_system:2.49
Disqus » Disqus Comment System » Version: 2.50

cpe:2.3:a:disqus:disqus_comment_system:2.50
Disqus » Disqus Comment System » Version: 2.51

cpe:2.3:a:disqus:disqus_comment_system:2.51
Disqus » Disqus Comment System » Version: 2.52

cpe:2.3:a:disqus:disqus_comment_system:2.52
Disqus » Disqus Comment System » Version: 2.53

cpe:2.3:a:disqus:disqus_comment_system:2.53
Disqus » Disqus Comment System » Version: 2.54

cpe:2.3:a:disqus:disqus_comment_system:2.54
Disqus » Disqus Comment System » Version: 2.55

cpe:2.3:a:disqus:disqus_comment_system:2.55
Disqus » Disqus Comment System » Version: 2.60

cpe:2.3:a:disqus:disqus_comment_system:2.60
Disqus » Disqus Comment System » Version: 2.61

cpe:2.3:a:disqus:disqus_comment_system:2.61
Disqus » Disqus Comment System » Version: 2.62

cpe:2.3:a:disqus:disqus_comment_system:2.62
Disqus » Disqus Comment System » Version: 2.63

cpe:2.3:a:disqus:disqus_comment_system:2.63
Disqus » Disqus Comment System » Version: 2.64

cpe:2.3:a:disqus:disqus_comment_system:2.64
Disqus » Disqus Comment System » Version: 2.65

cpe:2.3:a:disqus:disqus_comment_system:2.65
Disqus » Disqus Comment System » Version: 2.66

cpe:2.3:a:disqus:disqus_comment_system:2.66
Disqus » Disqus Comment System » Version: 2.67

cpe:2.3:a:disqus:disqus_comment_system:2.67
Disqus » Disqus Comment System » Version: 2.68

cpe:2.3:a:disqus:disqus_comment_system:2.68
Disqus » Disqus Comment System » Version: 2.69

cpe:2.3:a:disqus:disqus_comment_system:2.69
Disqus » Disqus Comment System » Version: 2.70

cpe:2.3:a:disqus:disqus_comment_system:2.70
Disqus » Disqus Comment System » Version: 2.71

cpe:2.3:a:disqus:disqus_comment_system:2.71
Disqus » Disqus Comment System » Version: 2.72

cpe:2.3:a:disqus:disqus_comment_system:2.72
Disqus » Disqus Comment System » Version: 2.73

cpe:2.3:a:disqus:disqus_comment_system:2.73
Disqus » Disqus Comment System » Version: 2.74

cpe:2.3:a:disqus:disqus_comment_system:2.74
Disqus » Disqus Comment System » Version: 2.75

cpe:2.3:a:disqus:disqus_comment_system:2.75

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-5347

Products

Pricing

Contact Us