← WordPress Vulnerabilities
WordPress security by component

Disable Comments

Disable Comments is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Mar 19, 2018; the highest CVE/CNA score is 8.8.

Plugin slug: disable-comments

CVE-2014-2550: Disable Comments: Cross-site request forgery

Disable Comments is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.

PublishedMar 19, 2018
Safe version guidanceSee mitigation notes
Safe version
Mar 19, 2018 CVE-2014-2550
Disable Comments: Cross-site request forgery
Disable Comments is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
See mitigation notes
CVE8.8
NVD8.8