{"cvss":9.9,"datePublished":"2020-01-16T00:00:00Z","dateUpdated":"2020-01-16T00:00:00Z","description":"The WordPress plugin, WP Database Reset through 3.1, contains a flaw that gave any authenticated user, with minimal permissions, the ability (with a simple wp-admin/admin.php?db-reset-tables[]=users request) to escalate their privileges to administrator while dropping all other users from the table.","dueDate":"","id":"CVE-2020-7047","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"wp_database_reset","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"CRITICAL","source":"vulncheck_kev","title":"webfactoryltd wp_database_reset Improper Privilege Management","vendor":"webfactoryltd"}