WordPress plugin
Disqus Comment System security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 5 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High1
- Medium3
- Low0
All Disqus Comment System vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.3 | Multiple Cross-Site Request Forgery <2.79Update to 2.79 | CVE-2014-5346 | |
| Medium5.4 | Cross-Site Request Forgery <2.76Update to 2.76 | CVE-2014-5347 | |
| Critical9.8 | Remote Code Execution <2.76Update to 2.76 | — | |
| Medium6.1 | Reflected Cross-Site Scripting <2.76Update to 2.76 | CVE-2014-5345 | |
| High7.1 | Reflected Cross-Site Scripting <2.68Update to 2.68 | — |
- Medium6.3Multiple Cross-Site Request Forgery
<2.79Update to 2.79
- Medium5.4Cross-Site Request Forgery
<2.76Update to 2.76
- Critical9.8Remote Code Execution
<2.76Update to 2.76
- Medium6.1Reflected Cross-Site Scripting
<2.76Update to 2.76
- High7.1Reflected Cross-Site Scripting
<2.68Update to 2.68
Disqus Comment System: common questions
Does Disqus Comment System have known vulnerabilities?
Yes. VulnCrest Radar lists 5 known vulnerabilities in Disqus Comment System: 1 critical, 1 high, 3 medium. None are known to affect version null.
How do I check which version of Disqus Comment System I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Disqus Comment System vulnerability?
CVE-2014-5346, published Sep 17, 2014: Disqus Comment System < 2.79 - Multiple Cross-Site Request Forgery. Severity: Medium (CVSS 6.3).
Is any Disqus Comment System vulnerability listed in CISA KEV?
No. None of the known Disqus Comment System vulnerabilities is currently listed in the CISA KEV catalog.