CVE-2026-107791
WP Comment Cleaner 6.1 - 7.1 - Subscriber+ Bulk Comment Deletion via nav_delete_all_comment
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The WP Comment Cleaner WordPress plugin before 7.2 does not perform a capability check or validate a nonce on one of its bulk comment-deletion routines, allowing authenticated users with minimal permissions, such as subscribers, to permanently delete all comments on the site.
| Vendor | unknown |
| Product | wp comment cleaner |
| Published | Oct 12, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown wp comment cleaner
Be the first to know when new unknown vulnerabilities affecting unknown wp comment cleaner are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / WP Comment Cleaner
6.1 < 7.2
References
Credits
Thanh Hang WPScan