Vulnerabilities > CVE-2020-36505 - Unspecified vulnerability in Delete ALL Comments Easily Project Delete ALL Comments Easily 1.3

047910
CVSS 6.5 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
HIGH
Availability impact
NONE
network
low complexity
delete-all-comments-easily-project
NVD
Published: 2021-11-01
Updated: 2024-11-21

Summary

The Delete All Comments Easily WordPress plugin through 1.3 is lacking Cross-Site Request Forgery (CSRF) checks, which could result in an unauthenticated attacker making a logged in admin delete all comments from the blog.

Vulnerable Configurations

Part Description Count
Application
Delete_All_Comments_Easily_Project
2

References