CVE record · 1 source
CVE-2025-8574
CVSS 8.7The Database Cleaner plugin for WordPress is vulnerable to arbitrary table deletion in all versions up to, and including, 1.4.7.
- Vendor
- Tigroumeow
- Product
- Database Cleaner: Cleanup, Optimization & Repair
- CVSS v3.1
- 8.7 AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H
- Weakness
- CWE-284
- Exposure class
- Web platform
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
The Database Cleaner plugin for WordPress is vulnerable to arbitrary table deletion in all versions up to, and including, 1.4.7.
The Database Cleaner plugin for WordPress is vulnerable to arbitrary table deletion in all versions up to, and including, 1.4.7. This is due to a lack of restriction on database tables that can be deleted. This makes it possible…