← WordPress Vulnerabilities
WordPress security by component

Database Reset

Database Reset is a WordPress component with 3 published CVE records in this archive. The latest tracked vulnerability was published Feb 21, 2024; the highest CVE/CNA score is 9.9.

Plugin slug: wordpress-database-reset

CVE-2024-1501: Database Reset: Cross-site request forgery

Database Reset is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.

PublishedFeb 21, 2024
Safe version guidanceSee mitigation notes
Safe version
Feb 21, 2024 CVE-2024-1501
Database Reset: Cross-site request forgery
Database Reset is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
See mitigation notes
CVE4.7
NVDPending
Jan 16, 2020 CVE-2020-7048
Wordpress Database Reset: A security weakness
Wordpress Database Reset is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE9.1
NVD9.1
Jan 16, 2020 CVE-2020-7047
Wordpress Database Reset: A security weakness
Wordpress Database Reset is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE9.9
NVD8.8