Medium · 4.3 CVE-2025-64357 EUVD-2025-37336GHSA-h3cx-p8jg-9mrc

WordPress Advanced Database Cleaner plugin <= 3.1.6 - Cross Site Request Forgery (CSRF) vulnerability

Published Oct 31, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Younes JFR. Product: Advanced Database Cleaner

Description

Cross-Site Request Forgery (CSRF) vulnerability in Younes JFR. Advanced Database Cleaner advanced-database-cleaner allows Cross Site Request Forgery.This issue affects Advanced Database Cleaner: from n/a through <= 3.1.6.

Affected products

Vendor	Product	Affected	Fixed
Younes JFR.	Advanced Database Cleaner	≤ 3.1.6	—

References

https://patchstack.com/database/Wordpress/Plugin/advanced-database-cleaner/vulnerability/wordpress-advanced-database-cleaner-plugin-3-1-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry