Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in Advanced Database Cleaner 3.1.2

  • Severity: high-risk
  • Status: Fixed
  • Publication: December 4, 2023

The Advanced Database Cleaner plugin for WordPress is vulnerable to a type of cyber attack called SQL Injection. This type of attack happens when a malicious user, with administrator-level access or higher, is able to add extra code to existing queries which can then be used to extract confidential information from the database. This vulnerability affects versions up to and including 3.1.2 of the plugin due to insufficient escaping of user-supplied data and a lack of preparation for the existing SQL query.

Detected in:

Advanced Database Cleaner fixed vulnerable versions: >= * <= 3.1.2

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.