3 matches found
CVE-2021-24725
The Comment Link Remove and Other Comment Tools WordPress plugin before 2.1.6 does not have CSRF check in its 'Delete comments easily', which could allow attackers to make logged in admin delete arbitrary comments...
PT-2021-16228
Name of the Vulnerable Software and Affected Versions Comment Link Remove and Other Comment Tools WordPress plugin versions prior to 2.1.6 Description The issue concerns the lack of a CSRF check in the 'Delete comments easily' feature, which could allow attackers to trick logged-in admins into...
CVE-2021-24725: Cross-Site Request Forgery (CSRF)
The Comment Link Remove and Other Comment Tools WordPress plugin before 2.1.6 does not have CSRF check in its 'Delete comments easily', which could allow attackers to make logged in admin delete arbitrary comments...