PLUGIN SECURITY

Is Advanced Database Cleaner safe?

Clean database by deleting orphaned data such as 'revisions', 'expired transients', optimize database and more...

What this plugin does

  • Slug: advanced-database-cleaner
  • Author: Younes JFR.
  • 100000+ active installs
  • 98/100 rating (1950 reviews on wordpress.org)
  • 2970088 all-time downloads
  • On WordPress.org since 2015-09-18

cleandatabaseOptimizeperformancepostmeta

Maintenance status

  • Latest known version: 4.2.0
  • Last updated: 2026-08-20 7:35pm GMT
  • Tested up to WordPress: 7.1
  • Requires PHP: 7.0+
  • Max supported PHP (analyzed): 8.4

Known vulnerabilities

8 known CVEs on file for Advanced Database Cleaner. Reported between 2020 and 2025.

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2025-64357 Advanced Database Cleaner – Optimize & Clean Database to Speed Up Site Performance [advanced-database-cleaner] < 3.1.7 Cross-Site Request Forgery (CSRF) Medium 4.3 < 3.1.7 3.1.7 2025-10-30 ✓ fixed in latest
CVE-2025-11497 Advanced Database Cleaner – Optimize & Clean Database to Speed Up Site Performance [advanced-database-cleaner] < 3.1.7 Improper Input Validation Medium 4.3 < 3.1.7 3.1.7 2025-10-24 ✓ fixed in latest
CVE-2024-0668 Advanced Database Cleaner – Optimize & Clean Database to Speed Up Site Performance [advanced-database-cleaner] < 3.1.4 Deserialization of Untrusted Data High 7.2 < 3.1.4 3.1.4 2024-01-24 ✓ fixed in latest
CVE-2023-49764 Advanced Database Cleaner – Optimize & Clean Database to Speed Up Site Performance [advanced-database-cleaner] < 3.1.3 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') High 7.6 < 3.1.3 3.1.3 2023-12-04 ✓ fixed in latest
CVE-2022-46813 Advanced Database Cleaner – Optimize & Clean Database to Speed Up Site Performance [advanced-database-cleaner] < 3.1.2 Cross-Site Request Forgery (CSRF) Medium 4.3 < 3.1.2 3.1.2 2023-02-21 ✓ fixed in latest
CVE-2022-2173 Advanced Database Cleaner – Optimize & Clean Database to Speed Up Site Performance [advanced-database-cleaner] < 3.1.1 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Medium 6.1 < 3.1.1 3.1.1 2022-06-27 ✓ fixed in latest
CVE-2021-24921 Advanced Database Cleaner – Optimize & Clean Database to Speed Up Site Performance [advanced-database-cleaner] < 3.0.4 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Medium 6.1 < 3.0.4 3.0.4 2022-01-24 ✓ fixed in latest
CVE-2021-24141 Advanced Database Cleaner – Optimize & Clean Database to Speed Up Site Performance [advanced-database-cleaner] < 3.0.2 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') High 7.2 < 3.0.2 3.0.2 2020-09-06 ✓ fixed in latest
+ 1 more known vulnerability
CVE Vulnerability Type Severity Affected Fixed in Published Status
Advanced Database Cleaner – Optimize & Clean Database to Speed Up Site Performance [advanced-database-cleaner] < 3.0.2 Unknown < 3.0.2 3.0.2 2020-09-06 ✓ fixed in latest

How to fix it

Keep Advanced Database Cleaner updated — 4.2.0 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").

This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.

Safer / more established alternatives

Check your own WordPress site

Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.