plugin

Comment Link Remove Vulnerabilities

1 known security issue reported for the Comment Link Remove WordPress plugin. Most recent disclosed Aug 23, 2021.

1 medium

Running Comment Link Remove on your site? Check whether your installed version is affected.

Comment Link Remove and Other Comment Tools <= 2.1.4 - Arbitrary Comment Deletion via Cross-Site Request Forgery

medium

The Comment Link Remove and Other Comment Tools WordPress plugin before 2.1.6 does not have CSRF check in its 'Delete comments easily', which could allow attackers to make logged in admin delete arbitrary comments

CVSS:: 4.3
Affected:: up to 2.1.4
Fixed in:: 2.1.6
Disclosed:: Aug 23, 2021

CVE-2021-24725 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database