Webguyio

**Name of the Vulnerable Software and Affected Versions** Dam Spam plugin for WordPress versions up to and including 1.0.8 **Description** The Dam Spam plugin for WordPress is susceptible to Cross-Site Request Forgery (CSRF). This is caused by a lack of nonce verification during the deletion of pending comments on the cleanup page. An unauthenticated attacker could potentially delete all pending comments by tricking an administrator into performing an action, such as clicking a malicious link. **Recommendations** Update the Dam Spam plugin to a version newer than 1.0.8.