6.5 Medium

CVE-2026-105059 Missing Authorization vulnerability in royalnavneet Delete All Comments of wordpress delete-all-comments-of-website…

Description

Missing Authorization vulnerability in royalnavneet Delete All Comments of wordpress delete-all-comments-of-website allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Delete All Comments of wordpress: from n/a through 7.1.

Affected products and versions

Product	Affected versions	Fixed in
Delete All Comments of wordpress 7.1	earliest → 7.1	No fix stated

The 2 CVEs of Delete All Comments of wordpress →

CVE-2022-4974 The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request… 6.3 Medium

Do you use Delete All Comments of wordpress?

Track this CVE Watch Delete All Comments of wordpress Check my SBOMs

www.cveye.io/en/cve/CVE-2026-105059

Timeline

Published October 6, 2026
Last modified October 12, 2026

References

patchstack.com patchstack.com

Track this CVE

CVE-2026-105059 Missing Authorization vulnerability in royalnavneet Delete All Comments of wordpress delete-all-comments-of-website…

Description

Affected products and versions

Other CVEs of Delete All Comments of wordpress