WordPress plugin
Database Reset security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 3 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical2
- High0
- Medium1
- Low0
All Database Reset vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.7 | Cross-Site Request Forgery to WP Reset Plugin Installation ≤3.22Update to 3.23 | CVE-2024-1501 | |
| Critical9.9 | Privilege Escalation ≤3.1Update to 3.15 | CVE-2020-7047 | |
| Critical9.1 | Unauthenticated Database Reset ≤3.1Update to 3.15 | CVE-2020-7048 |
- Medium4.7Cross-Site Request Forgery to WP Reset Plugin Installation
≤3.22Update to 3.23
- Critical9.9Privilege Escalation
≤3.1Update to 3.15
- Critical9.1Unauthenticated Database Reset
≤3.1Update to 3.15
Database Reset: common questions
Does Database Reset have known vulnerabilities?
Yes. VulnCrest Radar lists 3 known vulnerabilities in Database Reset: 2 critical, 1 medium. None are known to affect version null.
How do I check which version of Database Reset I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Database Reset vulnerability?
CVE-2024-1501, published Feb 20, 2024: Database Reset <= 3.22 - Cross-Site Request Forgery to WP Reset Plugin Installation. Severity: Medium (CVSS 4.7).
Is any Database Reset vulnerability listed in CISA KEV?
No. None of the known Database Reset vulnerabilities is currently listed in the CISA KEV catalog.