cbcvebase.

Featured Comments Plugin Project Featured Comments vulnerabilities

1 known vulnerability affecting featured_comments_plugin_project/featured_comments.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2014-4163P4MEDIUMCVSS 6.8PoCv1.2.12014-06-16
CVE-2014-4163 [MEDIUM] CWE-352 CVE-2014-4163: Multiple cross-site request forgery (CSRF) vulnerabilities in the Featured Comments plugin 1.2.1 for Multiple cross-site request forgery (CSRF) vulnerabilities in the Featured Comments plugin 1.2.1 for WordPress allow remote attackers to hijack the authentication of administrators for requests that change the (1) buried or (2) featured status of a comment via a request to wp-admin/admin-ajax.php.
nvd
Featured Comments Plugin Project Featured Comments vulnerabilities | cvebase