PT-2020-19355 · WordPress · Wp Database Reset

Published 2020-01-16 · Updated 2020-01-24 · CVE-2020-7047

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Critical

Base vector

AC:L/AV:N/A:H/C:H/I:H/PR:L/S:C/UI:N

Name of the Vulnerable Software and Affected Versions WP Database Reset versions 3.1 and earlier

Description The issue allows any authenticated user with minimal permissions to escalate their privileges to administrator by sending a request to the "wp-admin/admin.php?db-reset-tables[]=users" API endpoint, resulting in the removal of all other users from the table.

Recommendations For WP Database Reset versions 3.1 and earlier, update to a version that contains a fix for this issue to prevent privilege escalation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2020-7047

Affected Products

Wp Database Reset

References · 5

• 🔥 https://wordfence.com/blog/2020/01/easily-exploitable-vulnerabilities-patched-in-wp-database-reset-plugin · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-7047 · Security Note
• https://osv.dev/vulnerability/CVE-2020-7047 · Vendor Advisory
• https://wordpress.org/plugins/wordpress-database-reset/#developers · Note
• https://wpvulndb.com/vulnerabilities/10028 · Note