Description
WordPress Plugin Delete All Comments is prone to a vulnerability that lets attackers upload arbitrary files because the application fails to properly verify user-supplied input. An attacker can exploit this vulnerability to upload arbitrary code and run it in the context of the webserver process. This may facilitate unauthorized access or privilege escalation; other attacks are also possible. WordPress Plugin Delete All Comments version 2.0 is vulnerable; prior versions may also be affected.
Remediation
Edit the source code to ensure that input is properly verified or disable the plugin until a fix is available
References
Related Vulnerabilities
WordPress Plugin AB Press Optimizer Multiple Cross-Site Scripting Vulnerabilities (1.1.1)
MySQL CVE-2017-10279 Vulnerability (CVE-2017-10279)
PostgreSQL Resource Management Errors Vulnerability (CVE-2012-2655)
WordPress Plugin Easy Preloader Cross-Site Scripting (1.0.0)
WordPress Plugin Woo Custom Checkout Field Multiple Vulnerabilities (1.3.2)