CVE-2020-7048

Name of the Vulnerable Software and Affected Versions WP Database Reset versions 3.1 and earlier

Description The issue allows any unauthenticated user to reset any table in the database to the initial WordPress set-up state, resulting in the deletion of all site content stored in that table. This can be achieved through the "wp-admin/admin-post.php?db-reset-tables[]=comments" URI, which demonstrates the flaw.

Recommendations For WP Database Reset versions 3.1 and earlier, update to a version that contains a fix for this issue to prevent unauthorized database resets.