CVE-2020-36505
Delete All Comments Easily <= 1.3 - All Comments Deletion via CSRF
The Delete All Comments Easily WordPress plugin through 1.3 is lacking Cross-Site Request Forgery (CSRF) checks, which could result in an unauthenticated attacker making a logged in admin delete all comments from the blog.
CVSS 3.1 · 6.5 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products