https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T21:39:55.474699+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-11497 CVE-2025-11497 — Advanced Database Cleaner <= 3.1.6 - Cross-Site Request Forgery to Settings Manipulation 2026-10-06T21:39:55.490897+00:00

Affected: symptote Advanced Database Cleaner – Optimize & Clean Database to Speed Up Site Performance

The Advanced Database Cleaner plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.6. This is due to missing or incorrect nonce validation on the aDBc_prepare_elements_to_clean() function. This makes it possible for unauthenticated attackers to alter the keep last setting via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. CVE-2025-64357 is a duplicate of this issue.