CVE-2020-36852

The Custom Searchable Data Entry System plugin for WordPress (versions up to and including 1.7.1 ) is vulnerable to unauthenticated database wiping . The root cause is a missing capability check and insufficient validation within the ghazale_sds_delete_entries_table_row() function. This flaw allo...

CVE-2020-36852 Custom Searchable Data Entry System <= 1.7.1 - Unauthenticated Database Wiping

The Custom Searchable Data Entry System plugin for WordPress is vulnerable to unauthenticated database wiping in versions up to, and including 1.7.1, due to a missing capability check and lack of sufficient validation on the ghazalesdsdeleteentriestablerow function. This makes it possible for...

CVE-2020-36852: Missing Authorization

The Custom Searchable Data Entry System plugin for WordPress is vulnerable to unauthenticated database wiping in versions up to, and including 1.7.1, due to a missing capability check and lack of sufficient validation on the ghazalesdsdeleteentriestablerow function. This makes it possible for...

CVE-2020-36333

themegrill-demo-importer before 1.6.2 does not require authentication for wiping the database, because of a resetwizardactions hook...

CVE-2020-36333

The themegrill-demo-importer WordPress plugin versions prior to 1.6.2 (specifically versions 1.3.4 and above and versions 1.6.1 and below) contain an access control vulnerability. Due to a reset_wizard_actions hook that lacks authentication requirements, unauthenticated attackers can wipe the ent...