CVE-2020-36505 Delete All Comments Easily <= 1.3 - All Comments Deletion via CSRF

2021-11-0108:45:57

CWE-352

WPScan

www.cve.org

0.001 Low

EPSS

Percentile

31.7%

JSON

The Delete All Comments Easily WordPress plugin through 1.3 is lacking Cross-Site Request Forgery (CSRF) checks, which could result in an unauthenticated attacker making a logged in admin delete all comments from the blog.

CNA Affected

[
  {
    "product": "Delete All Comments Easily",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThanOrEqual": "1.3",
        "status": "affected",
        "version": "1.3",
        "versionType": "custom"
      }
    ]
  }
]