Search vulnerabilities

Results 1

Export CSV
CVE-2020-36505

Delete All Comments Easily <= 1.3 - All Comments Deletion via CSRF

The Delete All Comments Easily WordPress plugin through 1.3 is lacking Cross-Site Request Forgery (CSRF) checks, which could result in an unauthenticated attacker making a logged in admin delete all comments from the blog.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed