Not rated
CVE-2021-24725 The Comment Link Remove and Other Comment Tools WordPress plugin before 2.1.6 does not have CSRF check in its 'Delete…
Description
The Comment Link Remove and Other Comment Tools WordPress plugin before 2.1.6 does not have CSRF check in its 'Delete comments easily', which could allow attackers to make logged in admin delete arbitrary comments
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Comment Link Remove and Other Comment Tools 2.1 | earliest → < 2.1.6 | 2.1.6 |