TI-2014-03402 CVE-2014-4163 · GHSA-rrw6-j952-j99mMultiple cross-site request forgery (CSRF) vulnerabilities in the Featured Comments…Priority LOW 35Multiple cross-site request forgery (CSRF) vulnerabilities in the Featured Comments plugin 1.2.1 for WordPress allow remote attackers to hijack the authentication of administrators for requests that change the (1) buried…CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.02559 · Published 2014-06-16 · No fix listed CWE-352