CVE-2022-1709

The Throws SPAM Away WordPress plugin before 3.3.1 does not have CSRF checks in place when deleting comments (either all, spam, or pending), allowing attackers to make a logged in admin delete comments via a CSRF attack

Score

CVSS 3.1 4.3 Medium

Status

Modified - contact@wpscan.com

Published

2022-06-08

Last modified

2024-08-03

Weaknesses

CWE-352

Affected products

• Throws Spam Away (Gti)
• Throws Spam Away (Unknown)

References

• https://wpscan.com/vulnerability/ac290535-d9ec-459a-abc3-27cd78eb54fc