CVE-2020-36505 – Delete All Comments Easily <= 1.3 - All Comments Deletion via CSRF

https://notcve.org/view.php?id=CVE-2020-36505

16 Jun 2020 — The Delete All Comments Easily WordPress plugin through 1.3 is lacking Cross-Site Request Forgery (CSRF) checks, which could result in an unauthenticated attacker making a logged in admin delete all comments from the blog. El plugin Delete All Comments Easily de WordPress versiones hasta 1.3, carece de comprobaciones de tipo Cross-Site Request Forgery (CSRF), lo que podría resultar en que un atacante no autenticado hiciera que un administrador conectado borrara todos los comentarios del blog • https://medium.com/%40hoanhp/0-day-story-2-delete-all-comments-easily-a854e52a7d50 • CWE-352: Cross-Site Request Forgery (CSRF) •