Disqus Plugin Has Been Hacked

Within the last 24 hours Disqus quit appearing on our site in Chrome browser. We followed all of the typical guidelines (comments on, etc…) then began testing bare bones without the theme or plugins.

Finally we checked Chrome console and noticed several errors, all of which were trying to retrieve documents from seemingly random and unrelated URLs, all of those URLs were accompanied by 410, 403, 404, or CORB blocked messages. Turning off Disqus eliminated the console errors. Further testing turning on Disqus and deactivating other plugins / themes did not eliminate the error messages.

This plugin hasn’t been updated in 2 years and it would appear is likely now vulnerable to attack and has been compromised.