CVE-2020-36852

The Custom Searchable Data Entry System plugin for WordPress (versions up to and including 1.7.1 ) is vulnerable to unauthenticated database wiping . The root cause is a missing capability check and insufficient validation within the ghazale_sds_delete_entries_table_row() function. This flaw allo...