Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The Dam Spam plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.8. This is due to missing nonce verification on the pending comment deletion action in the cleanup page. This makes it possible for unauthenticated attackers to delete all pending comments via a forged request granted they can trick an admin into performing an action such as clicking on a link.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-2112 Cross-Site Request Forgery in Dam Spam WordPress Plugin Enables Comment Deletion https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-2112
Post summary
A Cross‑Site Request Forgery vulnerability (CVE-2026-2112) in the Dam Spam WordPress plugin allows attackers to delete comments.
CVE-2026-2112 The Dam Spam plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.8. This is due to missing nonce verification on … https://www.cve.org/CVERecord?id=CVE-2026-2112
Post summary
The Dam Spam plugin for WordPress suffers from a CSRF flaw caused by missing nonce verification in all versions up to 1.0.8.