CVE-2021-24725

CVE-2021-24725 involves the WordPress plugin “Comment Link Remove and Other Comment Tools” (before v2.1.6). The root cause is a missing CSRF check in the “Delete comments easily” action, enabling an attacker to induce a logged-in admin to delete arbitrary comments. Affected component: plugin func...