CVE Database /
CVE-2025-11497
CVE · Medium
CVE-2025-11497 — Advanced Database Cleaner – Optimize & Clean Database to Speed Up Site Performance [advanced-database-cleaner] < 3.1.7
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2025-11497
|
Advanced Database Cleaner – Optimize & Clean Database to Speed Up Site Performance [advanced-database-cleaner] < 3.1.7 |
Improper Input Validation |
Medium
4.3
|
< 3.1.7
|
3.1.7 |
2025-10-24 |
—
|
CVE-2025-11497
The Advanced Database Cleaner plugin for WordPress contains a security weakness in all versions prior to 3.1.6, specifically within the aDBc_prepare_elements_to_clean() function where nonce validation is either absent or improperly configured. This oversight enables malicious actors to manipulate settings without authentication by inducing an administrator into executing a specific action. The vulnerability allows unauthorized manipulation of the "keep last" setting through a crafted request.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings