CVE-2021-24725CWE-352

CVE-2021-24725: fallo en Comment Link Remove and Other Comment Tools

Comment Link Remove and Other Comment Tools < 2.1.6 - Arbitrary Comment Deletion via CSRF

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Comment Link Remove and Other Comment Tools

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

3Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackepss 0.5%
The Comment Link Remove and Other Comment Tools WordPress plugin before 2.1.6 does not have CSRF check in its 'Delete comments easily', which could allow attackers to make logged in admin delete arbitrary comments
Productos afectados
Unknown · Comment Link Remove and Other Comment Tools