← voltar
CVE-2020-36505

Delete All Comments Easily <= 1.3 - All Comments Deletion via CSRF

EPSS 0.6%CWE-352
The Delete All Comments Easily WordPress plugin through 1.3 is lacking Cross-Site Request Forgery (CSRF) checks, which could result in an unauthenticated attacker making a logged in admin delete all comments from the blog.

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →