Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-105059 EUVD-2026-93085GHSA-rghv-qgm9-69c2

WordPress Delete All Comments of wordpress plugin <= 7.1 - Broken Access Control vulnerability

Published Oct 6, 2026 · Updated Oct 12, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in royalnavneet Delete All Comments of wordpress delete-all-comments-of-website allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Delete All Comments of wordpress: from n/a through 7.1.

Affected products

VendorProductAffectedFixed
royalnavneet Delete All Comments of wordpress ≤ 7.1 —

References