Skip to content
OpenAdvisories
Critical · 9.9 CVE-2020-7047 EUVD-2020-28181GHSA-9f6m-8x44-j5mr

The WordPress plugin, WP Database Reset through 3.1, contains a flaw that gave any authenticated user, with minimal permissions, the abilit…

Published Jan 16, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Description

The WordPress plugin, WP Database Reset through 3.1, contains a flaw that gave any authenticated user, with minimal permissions, the ability (with a simple wp-admin/admin.php?db-reset-tables[]=users request) to escalate their privileges to administrator while dropping all other users from the table.

References