Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2025/10/26 7:16 a.m.2 views

CVE-2025-11497

The Advanced Database Cleaner plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.6. This is due to missing or incorrect nonce validation on the aDBcprepareelementstoclean function. This makes it possible for unauthenticated attackers to alte...

4.3CVSS5.8AI score0.00078EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/25 9:32 a.m.2 views

EUVD-2025-35927

The Advanced Database Cleaner plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.6. This is due to missing or incorrect nonce validation on the aDBcprepareelementstoclean function. This makes it possible for unauthenticated attackers to alte...

4.3CVSS4.8AI score0.00078EPSS
Exploits0References3
NVD
NVD
added 2025/10/25 7:15 a.m.5 views

CVE-2025-11497

The Advanced Database Cleaner plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.6. This is due to missing or incorrect nonce validation on the aDBcprepareelementstoclean function. This makes it possible for unauthenticated attackers to alte...

4.3CVSS0.00078EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/10/25 6:49 a.m.12 views

CVE-2025-11497 Advanced Database Cleaner <= 3.1.6 - Cross-Site Request Forgery to Settings Manipulation

The Advanced Database Cleaner plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.6. This is due to missing or incorrect nonce validation on the aDBcprepareelementstoclean function. This makes it possible for unauthenticated attackers to alte...

4.3CVSS0.00078EPSS
Exploits0References2
CVE
CVE
added 2025/10/25 6:49 a.m.14 views

CVE-2025-11497

CVE-2025-11497 is a CSRF vulnerability in the WordPress plugin Advanced Database Cleaner (versions up to 3.1.6). The issue arises from missing or incorrect nonce validation in the function aDBc_prepare_elements_to_clean() , allowing unauthenticated attackers to manipulate the keep last setting vi...

4.3CVSS5.8AI score0.00078EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/10/25 6:49 a.m.2 views

CVE-2025-11497 Advanced Database Cleaner <= 3.1.6 - Cross-Site Request Forgery to Settings Manipulation

The Advanced Database Cleaner plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.6. This is due to missing or incorrect nonce validation on the aDBcprepareelementstoclean function. This makes it possible for unauthenticated attackers to alte...

4.3CVSS5.7AI score0.00078EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/10/25 12:0 a.m.3 views

PT-2025-43720

Name of the Vulnerable Software and Affected Versions Advanced Database Cleaner plugin for WordPress versions up to and including 3.1.6 Description The Advanced Database Cleaner plugin for WordPress is susceptible to a Cross-Site Request Forgery CSRF issue. This is caused by insufficient or...

4.3CVSS6AI score0.00078EPSS
Exploits0References7
Rows per page
Query Builder