Skip to content
OpenAdvisories
Unscored CVE-2021-24141 EUVD-2021-11055GHSA-6h67-c8r4-fr78

Advanced Database Cleaner < 3.0.2 - Authenticated SQL injection

Published Mar 18, 2021 · Updated Aug 3, 2024 · Assigned by WPScan

Description

Unvaludated input in the Advanced Database Cleaner plugin, versions before 3.0.2, lead to SQL injection allowing high privilege users (admin+) to perform SQL attacks.

Affected products

VendorProductAffectedFixed
— Advanced Database Cleaner 3.0.2 – < 3.0.2 3.0.2

References