Extension WordPress
Vulnérabilités Advanced Database Cleaner – Optimize & Clean Database to Speed Up Site Performance
Cette page rassemble les failles publiées pour Advanced Database Cleaner – Optimize & Clean Database to Speed Up Site Performance, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Advanced Database Cleaner – Optimize & Clean Database to Speed Up Site Performance
8 fiches
Advanced Database Cleaner <= 3.1.6 – Cross-Site Request Forgery
The Advanced Database Cleaner – Optimize & Clean Database to Speed Up Site Performance plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.6. This is due to missing or incorrect…
*-3.1.6
3.1.7
30/10/2025
Advanced Database Cleaner <= 3.1.6 – Cross-Site Request Forgery to Settings Manipulation
The Advanced Database Cleaner plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.6. This is due to missing or incorrect nonce validation on the aDBc_prepare_elements_to_clean() function. This makes it possible…
*-3.1.6
3.1.7
24/10/2025
Advanced Database Cleaner <= 3.1.3 – Authenticated(Administrator+) PHP Object Injection via process_bulk_action
The Advanced Database Cleaner plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.1.3 via deserialization of untrusted input in the 'process_bulk_action' function. This makes it possible for authenticated attacker, with…
*-3.1.3
3.1.4
24/01/2024
Advanced Database Cleaner <= 3.1.2 – Authenticated (Administrator+) SQL Injection
The Advanced Database Cleaner plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter in versions up to, and including, 3.1.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on…
*-3.1.2
3.1.3
04/12/2023
Advanced Database Cleaner <= 3.1.1 – Cross-Site Request Forgery via aDBc_save_settings_callback
The Advanced Database Cleaner plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.1.1. This is due to missing or incorrect nonce validation on the aDBc_save_settings_callback function. This makes it possible for…
*-3.1.1
3.1.2
21/02/2023
Advanced Database Cleaner <= 3.1.0 – Reflected Cross-Site Scripting
The Advanced Database Cleaner WordPress plugin before 3.1.1 does not escape numerous generated URLs before outputting them back in href attributes of admin dashboard pages, leading to Reflected Cross-Site Scripting
*-3.1.0
3.1.1
27/06/2022
Advanced Database Cleaner <= 3.0.3 – Reflected Cross-Site Scripting
The Advanced Database Cleaner WordPress plugin before 3.0.4 does not sanitise and escape $_GET keys and values before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues
[*, 3.0.4)
3.0.4
24/01/2022
Advanced Database Cleaner <= 3.0.1 – SQL injection
Unvaludated input in the Advanced Database Cleaner plugin, versions before 3.0.2, lead to SQL injection allowing high privilege users (admin+) to perform SQL attacks.
[*, 3.0.2)
3.0.2
06/09/2020
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.