CVE-2021-24725: Quantumcloud Comment Link Remove And Other Comment Tools

Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days.

The Comment Link Remove and Other Comment Tools WordPress plugin before 2.1.6 does not have CSRF check in its 'Delete comments easily', which could allow attackers to make logged in admin delete arbitrary comments

Affected products

• Quantumcloud Comment Link Remove And Other Comment Tools: before 2.1.6 (fixed in 2.1.6)

Published 2021-09-13. Last modified 2026-06-17.