CVE-2020-36505 | BDVDB-2026-163513 Detail

Description#

The Delete All Comments Easily WordPress plugin through 1.3 is lacking Cross-Site Request Forgery (CSRF) checks, which could result in an unauthenticated attacker making a logged in admin delete all comments from the blog.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12021-11-01Record published in the CVE List.
2. Version 22024-08-04Most recent update recorded in the CVE List.