CVE-2025-11497

Name of the Vulnerable Software and Affected Versions Advanced Database Cleaner plugin for WordPress versions up to and including 3.1.6

Description The Advanced Database Cleaner plugin for WordPress is susceptible to a Cross-Site Request Forgery (CSRF) issue. This is caused by insufficient or incorrect nonce validation within the aDBc prepare elements to clean() function. An unauthenticated attacker could potentially modify the 'keep last' setting by crafting a malicious request and tricking a site administrator into triggering an action, such as clicking a link.

Recommendations Update the Advanced Database Cleaner plugin to a version newer than 3.1.6.