Cross-Site Request Forgery Vulnerability in Advanced Database Cleaner by Younes JFR
CVE-2025-64357

4.3MEDIUM

Key Information:

Vendor

WordPress
Status
Advanced Database Cleaner
Vendor
CVE Published:
31 October 2025

What is CVE-2025-64357?

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the Advanced Database Cleaner plugin developed by Younes JFR. This security issue allows attackers to perform unauthorized actions on behalf of authenticated users, potentially compromising sensitive data and user permissions. The vulnerability affects all versions through 3.1.6, and it is crucial for users to update to the latest version to mitigate the risk.

Affected Version(s)

Advanced Database Cleaner <= n/a

References

https://vdp.patchstack.com/database/Wordpress/Plugin/adva...
vdb-entry

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Bao - BlueRock | Patchstack Bug Bounty Program
JSON
.
CVE-2025-64357 : Cross-Site Request Forgery Vulnerability in Advanced Database Cleaner by Younes JFR