WordPress security by component
Delete All Comments
Plugin description
Delete All Comments is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Jun 07, 2023; the highest CVE/CNA score is 9.8.
Plugin slug:
delete-all-commentsLatest vulnerability
CVE-2016-15033: Delete All Comments: Dangerous file upload
Delete All Comments is affected by dangerous file upload. The vulnerable path is reachable without authentication. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.
| Safe version |
|
||
|---|---|---|---|
| Jun 07, 2023 |
CVE-2016-15033
Delete All Comments: Dangerous file upload
Delete All Comments is affected by dangerous file upload. The vulnerable path is reachable without authentication. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.
|
See mitigation notes |
CVE9.8
NVD9.8
|