Last revised:
Confidence: Medium
This plugin has been given a short, targeted code review.
Before using this plugin, you should very carefully consider its potential problems and should conduct a thorough assessment. Read more about this recommendation.
The version of this plugin that this recommendation was based on is known to be vulnerable to attack:
This recommendation applies to version 1.0.3 of this plugin, but the most recent version is 2.4.6. These findings may no longer be correct.
The plugin contains or is likely to contain a vulnerability which could be exploited by an end user and which would compromise the site’s confidentiality, integrity or availability:
Contains a CSRF vulnerability, which would allow an attacker to disable or enable comments (see the advisory for more details).
Read more about our failure criteria.