CVE-2020-7047

CVE-2020-7047 – WordPress WP Database Reset plugin

CVE-2020-7048

The CVE describes a vulnerability in the WordPress WP Database Reset plugin (versions up to 3.1; fixed in later releases, with guidance noting upgrade to at least 3.15). Root cause: an unauthenticated user can trigger a database-table reset via the admin-post.php endpoint (db-reset-tables[] param...

CVE-2024-1501

CVE-2024-1501 affects the WordPress plugin Database Reset (WP Database Reset) up to version 3.22. The issue is a Cross-Site Request Forgery (CSRF) due to missing/incorrect nonce validation on the install_wpr() function, allowing unauthenticated attackers to trigger installation of the WP Reset Pl...