What is CVE-2014-5346?

CVE-2014-5346 is a vulnerability in Disqus Comment System, classified under Cross-Site Request Forgery (CSRF). Published 2014-08-19.

Is CVE-2014-5346 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

CSRF in Disqus Comment System

CVE-2014-5346

Multiple cross-site request forgery (CSRF) vulnerabilities in the Disqus Comment System plugin 2.77 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) activate or (2) deactivate the plugin via the active parameter to wp-admin/edit-comments.php, (3) import comments via an import_comments action, or (4) export comments via an export_comments action to wp-admin/index.php.

Vulnerability class: CSRF (Cross-Site Request Forgery)

EPSS: 0.027 (84.1th percentile) — read the EPSS interpretation.

Affected products

Disqus Disqus_comment_system — versions 2.77
N/a — versions n/a

Weakness classification (CWE)

CWE-352 — Cross-Site Request Forgery (CSRF)

Public proof-of-concept exploits

20142995/nuclei-templates

References

cve@mitre.org (mailing-list, x_refsource_FULLDISC)
cve@mitre.org (Exploit, x_refsource_MISC)

Frequently asked questions

What is CVE-2014-5346?: CVE-2014-5346 is a vulnerability in Disqus Comment System, classified under Cross-Site Request Forgery (CSRF). Published 2014-08-19.
Is CVE-2014-5346 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.