QuantumCloud comment link remove and other comment tools vulnerabilities

Latest QuantumCloud comment link remove and other comment tools CVEs

Newest publication first

1. CVE-2021-24725 Comment Link Remove and Other Comment Tools < 2.1.6 - Arbitrary Comment Deletion via CSRF

   Published 2021-09-13

   Medium·CVSS 4.3 EPSS 0.49%

   The Comment Link Remove and Other Comment Tools WordPress plugin before 2.1.6 does not have CSRF check in its 'Delete comments easily', which could allow attackers to make logged in admin delete arbitrary comments

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.