Security Advisory

CVE-2021-24725

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-09-13 17:56:39
Last updated 2024-08-03 19:42:16
Assigner WPScan
State PUBLISHED

Description

The Comment Link Remove and Other Comment Tools WordPress plugin before 2.1.6 does not have CSRF check in its Delete comments easily, which could allow attackers to make logged in admin delete arbitrary comments