PT-2020-19356
CVE-2020-7048
·
تاريخ النشر
2020-01-16
·
تاريخ التحديث
2021-07-21
الوصف من
CVSS 3.1
9.1
حرجةالمقاييسAC:L/AV:N/A:H/C:N/I:H/PR:N/S:U/UI:N
Name of the Vulnerable Software and Affected Versions
WP Database Reset versions 3.1 and earlier
Description
The issue allows any unauthenticated user to reset any table in the database to the initial WordPress set-up state, resulting in the deletion of all site content stored in that table. This can be achieved through the "wp-admin/admin-post.php?db-reset-tables[]=comments" URI, which demonstrates the flaw.
Recommendations
For WP Database Reset versions 3.1 and earlier, update to a version that contains a fix for this issue to prevent unauthorized database resets.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾