CVE-2020-7047

The WP Database Reset WordPress plugin (versions 3.1 and earlier ) contains a privilege escalation vulnerability. A flaw allows any authenticated user with minimal permissions to escalate their privileges to administrator by sending a simple request to wp-admin/admin.php?db-reset-tables[]=users. ...

CVE-2020-7048

The CVE describes a vulnerability in the WordPress WP Database Reset plugin (versions up to 3.1; fixed in later releases, with guidance noting upgrade to at least 3.15). Root cause: an unauthenticated user can trigger a database-table reset via the admin-post.php endpoint (db-reset-tables[] param...

CVE-2024-1501

CVE-2024-1501 affects the WordPress plugin Database Reset (WP Database Reset) up to version 3.22. The issue is a Cross-Site Request Forgery (CSRF) due to missing/incorrect nonce validation on the install_wpr() function, allowing unauthenticated attackers to trigger installation of the WP Reset Pl...