CVE-2021-24725

Comment Link Remove and Other Comment Tools < 2.1.6 - Arbitrary Comment Deletion via CSRF

State: Published
Severity: Not scored
Published: Sep 13, 2021
Updated: Aug 3, 2024
Reserved: Jan 14, 2021

Description

The Comment Link Remove and Other Comment Tools WordPress plugin before 2.1.6 does not have CSRF check in its 'Delete comments easily', which could allow attackers to make logged in admin delete arbitrary comments

Scores

The record has no CVSS score.

Weaknesses

CWE-352 Cross-Site Request Forgery (CSRF)

Affected Products

Product	Versions
Comment Link Remove and Other Comment ToolsUnknown	2.1.6 to before 2.1.6Affected

References

https://wpscan.com/vulnerability/01483284-57f5-4ae9-b5f1-ae26b623571f
https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=29225

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.