CVEs-PoC/2014/CVE-2014-2550.md

CVE-2014-2550

Description

Cross-site request forgery (CSRF) vulnerability in the Disable Comments plugin before 1.0.4 for WordPress allows remote attackers to hijack the authentication of administrators for requests that enable comments via a request to the disable_comments_settings page to wp-admin/options-general.php.

POC

Reference

• https://security.dxw.com/advisories/csrf-in-disable-comments-1-0-3/

Github

• https://github.com/20142995/nuclei-templates