Sigmaplugin Advanced Database Cleaner — known CVE vulnerabilities

Every CVE whose affected-product data names Sigmaplugin Advanced Database Cleaner, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2023-49764 — CVSS 7.6 (high): Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Younes JFR. Advanced Database…
• CVE-2021-24141 — CVSS 7.2 (high): Unvaludated input in the Advanced Database Cleaner plugin, versions before 3.0.2, lead to SQL injection allowing high privilege users…
• CVE-2024-0668 — CVSS 6.6 (medium): The Advanced Database Cleaner plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.1.3 via…
• CVE-2021-24921 — CVSS 6.1 (medium): The Advanced Database Cleaner WordPress plugin before 3.0.4 does not sanitise and escape $_GET keys and values before outputting them back…
• CVE-2022-2173 — CVSS 6.1 (medium): The Advanced Database Cleaner WordPress plugin before 3.1.1 does not escape numerous generated URLs before outputting them back in href…
• CVE-2022-46813 — CVSS 4.3 (medium): Cross-Site Request Forgery (CSRF) vulnerability in Younes JFR. Advanced Database Cleaner plugin <= 3.1.1 versions.