Skip to content
OpenAdvisories

Product · ghazale

Custom Searchable Data Entry System

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.1

    Custom Searchable Data Entry System <= 1.7.1 - Unauthenticated Database Wiping

    The Custom Searchable Data Entry System plugin for WordPress is vulnerable to unauthenticated database wiping in versions up to, and including 1.7.1, due to a missing capability check and lack of sufficient validation on the ghazale_sds_delete_entries_table_r…