Skip to content
OpenAdvisories

Product · jppreus

Create DB Tables

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.1

    Create DB Tables <= 1.2.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Database Table Creation/Deletion via admin-post.php

    The Create DB Tables plugin for WordPress is vulnerable to authorization bypass in all versions up to and including 1.2.1. The plugin registers admin_post action hooks for creating tables (admin_post_add_table) and deleting tables (admin_post_delete_db_table)…