Description (CNA)
The Comment Link Remove and Other Comment Tools WordPress plugin before 2.1.6 does not have CSRF check in its 'Delete comments easily', which could allow attackers to make logged in admin delete arbitrary comments
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Unknown / Comment Link Remove and Other Comment Tools | affected 2.1.6 before 2.1.6 |
CWE
CWE-352
References
- https://wpscan.com/vulnerability/01483284-57f5-4ae9-b5f1-ae26b623571f
- https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=29225
ADP enrichment
No English description supplied.