CVE-2026-107791

The WP Comment Cleaner WordPress plugin (versions before 7.2 ) contains a vulnerability where a bulk comment-deletion routine fails to perform a capability check or validate a nonce . This flaw allows authenticated users with minimal privileges, such as subscribers , to permanently delete all com...