Featured Comments [feature-comments] < 1.2.5
unknown[en] The feature-comments plugin before 1.2.5 for WordPress has CSRF for featuring or burying a comment.
- Affected:
- up to 1.2.5
- Fixed in:
- 1.2.5
- Disclosed:
- Aug 22, 2019
plugin
4 known security issues reported for the Feature Comments WordPress plugin. Most recent disclosed Aug 22, 2019.
Running Feature Comments on your site? Check whether your installed version is affected.
Scan your site free[en] The feature-comments plugin before 1.2.5 for WordPress has CSRF for featuring or burying a comment.
The feature-comments plugin before 1.2.5 for WordPress has CSRF for featuring or burying a comment.
[en] Multiple cross-site request forgery (CSRF) vulnerabilities in the Featured Comments plugin 1.2.1 for WordPress allow remote attackers to hijack the authentication of administrators for requests that change the (1) buried or (2) featured status of a comment via a request to wp-admin/admin-ajax.php.
Multiple cross-site request forgery (CSRF) vulnerabilities in the Featured Comments plugin 1.2.5 for WordPress allow remote attackers to hijack the authentication of administrators for requests that change the (1) buried or (2) featured status of a comment via a request to wp-admin/admin-ajax.php.
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free