| Package | Affected versions | Patched versions |
|---|---|---|
| disqus comment system | = 2.40= 2.41= 2.42= 2.43= 2.44= 2.45= 2.46= 2.47= 2.48= 2.49= 2.50= 2.51= 2.52= 2.53= 2.54= 2.55= 2.60= 2.61= 2.62= 2.63= 2.64= 2.65= 2.66= 2.67= 2.68= 2.69= 2.70= 2.71= 2.72= 2.73= 2.74≤ 2.75 |
Multiple cross-site request forgery (CSRF) vulnerabilities in the Disqus Comment System plugin before 2.76 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the (1) disqus_replace, (2) disqus_public_key, or (3) disqus_secret_key parameter to wp-admin/edit-comments.php in manage.php or that (4) reset or (5) delete plugin options via the reset parameter to wp-admin/edit-comments.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free