EUVD-2014-5236

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Multiple CSRF vulnerabilities in Disqus Comment System plugin before 2.76 allow remote authentication hijack.

Reporter	Title	Published	Views	Family All 5
CVE	CVE-2014-5347	19 Aug 201419:00	–	cve
Cvelist	CVE-2014-5347	19 Aug 201419:00	–	cvelist
NVD	CVE-2014-5347	19 Aug 201419:55	–	nvd
Prion	Cross site request forgery (csrf)	19 Aug 201419:55	–	prion
WPVulnDB	Disqus <= 2.75 - Cross-Site Scripting (XSS) & CSRF	12 Aug 201400:00	–	wpvulndb

[
  {
    "enisaIdVendor": [
      {
        "id": "a1f0724f-4599-3ab2-8e6b-b79cadbe4a77",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "5aeca64f-a6d8-3aa7-8802-9325ad3afe85",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
wordpress	www.wordpress.org/plugins/disqus-comment-system/other_notes
packetstormsecurity	www.packetstormsecurity.com/files/127847/WordPress-Disqus-2.7.5-CSRF-Cross-Site-Scripting.html
seclists	www.seclists.org/fulldisclosure/2014/Aug/35
packetstormsecurity	www.packetstormsecurity.com/files/127852/Disqus-2.7.5-Cross-Site-Request-Forgery-Cross-Site-Scripting.html
nikcub	www.nikcub.com/posts/multiple-vulnerabilities-in-disqus-wordpress-plugin
gist	www.gist.github.com/nikcub/cb5dc7a5464276c8424a
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/95288
securityfocus	www.securityfocus.com/bid/69205
exploit-db	www.exploit-db.com/exploits/34336
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/95289

07 Oct 2025 00:30Current

6.4Medium risk

Vulners AI Score6.4

CVSS 26.8

EPSS0.03019

csrf vulnerability disqus plugin wordpress xss attack remote attacker admin authentication