phpwarden
FeaturesComparePricingAdvisoriesBlogDocsChangelogLog in
Log inStart free

CVE-2014-5347: Multiple cross-site request forgery (CSRF) vulnerabilities in the Disqus Comment System plugin before 2.76 for WordPress allow remote attackers to hijack the authentication of administrators for reque

medium Affects disqus-comment-system (WordPress plugin). Feed 2026.10.29.1, updated 2026-10-28; published ; advisory modified .

Multiple cross-site request forgery (CSRF) vulnerabilities in the Disqus Comment System plugin before 2.76 for WordPress allow remote attackers to hijack the authentication of administrators for reque

Package
disqus-comment-system (WordPress plugin) WordPress
Affected versions
<=2.75 or =2.40 or =2.41 or =2.42 or =2.43 or =2.44 or =2.45 or =2.46 or =2.47 or =2.48 or =2.49 or =2.50 or =2.51 or =2.52 or =2.53 or =2.54 or =2.55 or =2.60 or =2.61 or =2.62 or =2.63 or =2.64 or =2.65 or =2.66 or =2.67 or =2.68 or =2.69 or =2.70 or =2.71 or =2.72 or =2.73 or =2.74
Fixed in
no fix recorded
Severity
medium  CVSS 6.8
Exploitation
not on CISA KEV · EPSS 5% (92.0th percentile)
Published
2014-08-19
Source
nvd

References

CWE-352
NVD recorddisqus-comment-system (WordPress plugin) advisories

Am I affected?

Find out in one command. phpwarden checks your WordPress install against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.

# one-time install
pip install phpwarden

# then
phpwarden wordpress /var/www/html

Or keep it checked automatically with the GitHub Action or a nightly cron; see WordPress docs.

Install docs   How findings are ranked

Related advisories