Vulnerabilities > GTI

DATE CVE VULNERABILITY TITLE RISK
2022-06-08 CVE-2022-1709 Cross-Site Request Forgery (CSRF) vulnerability in GTI Throws Spam Away
The Throws SPAM Away WordPress plugin before 3.3.1 does not have CSRF checks in place when deleting comments (either all, spam, or pending), allowing attackers to make a logged in admin delete comments via a CSRF attack
network
gti CWE-352
4.3