CVE-2021-24725 | BDVDB-2026-160758 Detail

Comment Link Remove and Other Comment Tools

Description#

The Comment Link Remove and Other Comment Tools WordPress plugin before 2.1.6 does not have CSRF check in its 'Delete comments easily', which could allow attackers to make logged in admin delete arbitrary comments

Impact#

No impact statement in the source data.

Weaknesses#

CWE-352 Cross-Site Request Forgery (CSRF)

References#

https://wpscan.com/vulnerability/01483284-57f5-4ae9-b5f1-ae26b623571f
https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=29225

Exploit#

No public exploit known

History#

Version 12021-09-13Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.