PLUGIN SECURITY
Is Advanced Database Cleaner safe?
Known vulnerabilities, PHP compatibility and safer alternatives for the Advanced Database Cleaner WordPress plugin — checked against WP Clinic's local security database.
Plugin details
- Slug:
advanced-database-cleaner - Requires PHP: 7.0+
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
- Advanced Database Cleaner – Optimize & Clean Database to Speed Up Site Performance [advanced-database-cleaner] < 3.0.4 [CVE-2021-24921, WordPress Advanced Database Cleaner plugin <= 3.0.3 - Reflected Cross-Site Scripting (XSS) vulnerability, Advanced Database Cleaner < 3.0.4 - Reflected Cross-Site Scripting, Advanced Database Cleaner <= 3.0.3 - Reflected Cross-Site Scripting]
- Advanced Database Cleaner – Optimize & Clean Database to Speed Up Site Performance [advanced-database-cleaner] < 3.0.2 [CVE-2021-24141, Advanced Database Cleaner < 3.0.2 - Authenticated SQL injection, Advanced Database Cleaner <= 3.0.1 - SQL injection]
- Advanced Database Cleaner – Optimize & Clean Database to Speed Up Site Performance [advanced-database-cleaner] < 3.0.2 [WordPress Advanced Database Cleaner plugin <= 3.0.1 - Authenticated SQL injection (SQLi) vulnerability]
- Advanced Database Cleaner – Optimize & Clean Database to Speed Up Site Performance [advanced-database-cleaner] < 3.1.1 [CVE-2022-2173, WordPress Advanced Database Cleaner plugin <= 3.1.0 - Reflected Cross-Site Scripting (XSS) vulnerability, Advanced Database Cleaner < 3.1.1 - Reflected Cross-Site Scripting, Advanced Database Cleaner <= 3.1.0 - Reflected Cross-Site Scripting]
- Advanced Database Cleaner – Optimize & Clean Database to Speed Up Site Performance [advanced-database-cleaner] < 3.1.2 [CVE-2022-46813, WordPress Advanced Database Cleaner Plugin <= 3.1.1 is vulnerable to Cross Site Request Forgery (CSRF), Advanced Database Cleaner <= 3.1.1 - Cross-Site Request Forgery via aDBc_save_settings_callback, Advanced Database Cleaner <= 3.1.1 - Settings Update via CSRF]
+ 4 more known vulnerabilities
- Advanced Database Cleaner – Optimize & Clean Database to Speed Up Site Performance [advanced-database-cleaner] < 3.1.3 [CVE-2023-49764, WordPress Advanced Database Cleaner Plugin <= 3.1.2 is vulnerable to SQL Injection, Advanced Database Cleaner <= 3.1.2 - Authenticated (Administrator+) SQL Injection, Advanced Database Cleaner < 3.1.3 - Authenticated (Administrator+) SQL Injection]
- Advanced Database Cleaner – Optimize & Clean Database to Speed Up Site Performance [advanced-database-cleaner] < 3.1.4 [CVE-2024-0668, Advanced Database Cleaner <= 3.1.3 - Authenticated(Administrator+) PHP Object Injection via process_bulk_action, WordPress Advanced Database Cleaner Plugin <= 3.1.3 is vulnerable to PHP Object Injection, Advanced Database Cleaner < 3.1.4 - Administrator+ PHP Object Injection]
- Advanced Database Cleaner – Optimize & Clean Database to Speed Up Site Performance [advanced-database-cleaner] < 3.1.7 [CVE-2025-11497, WordPress Advanced Database Cleaner Plugin <= 3.1.6 is vulnerable to Cross Site Request Forgery (CSRF), EUVD-2025-35927, Advanced Database Cleaner <= 3.1.6 - Cross-Site Request Forgery to Settings Manipulation]
- Advanced Database Cleaner – Optimize & Clean Database to Speed Up Site Performance [advanced-database-cleaner] < 3.1.7 [CVE-2025-64357, Advanced Database Cleaner <= 3.1.6 - Cross-Site Request Forgery]
Vulnerabilities are matched against the exact installed version when it's known. Always keep the plugin updated to the latest release.
Safer / more established alternatives
- WP-Sweep — 100000+ active installs — max PHP 8.4
- Search Regex — 100000+ active installs — max PHP 8.4
- Media Cleaner: Clean your WordPress! — 90000+ active installs — max PHP 8.4
- BackUpWordPress — 90000+ active installs — max PHP 8.4
- Go Live Update Urls — 80000+ active installs — max PHP 8.4
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.