Now officially on WordPress.org

CVE Database / CVE-2021-24141

CVE · High

CVE-2021-24141 — Advanced Database Cleaner – Optimize & Clean Database to Speed Up Site Performance [advanced-database-cleaner] < 3.0.2

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2021-24141 Advanced Database Cleaner – Optimize & Clean Database to Speed Up Site Performance [advanced-database-cleaner] < 3.0.2 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') High 7.2 < 3.0.2 3.0.2 2020-09-06 —

CVE-2021-24141

The Advanced Database Cleaner plugin before version 3.0.2 contains a SQL injection vulnerability stemming from improper validation of user-supplied input. Administrative users and above could exploit this flaw to execute arbitrary SQL commands against the database. The vulnerability requires elevated privileges to exploit, limiting exposure to users with admin-level access or higher.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings