CVE-2026-105059 — WordPress Delete All Comments of wordpress plugin <= 7.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in royalnavneet Delete All Comments of wordpress delete-all-comments-of-website allows Exploiting Incorrectly Configured Access Control Secur…
Published: 2026-10-06 · CVSS: 6.5 · CVSS 3.1
Missing Authorization vulnerability in royalnavneet Delete All Comments of wordpress delete-all-comments-of-website allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Delete All Comments of wordpress: from n/a through 7.1.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7