CVE WATCH / VULNERABILITY DETAIL
CVE-2025-8574
HIGHCVSS 8.7NVD feed
Published 30 October 2026 · tracked since 31 October 2026
Description
The Database Cleaner plugin for WordPress is vulnerable to arbitrary table deletion in all versions up to, and including, 1.4.7. This is due to a lack of restriction on database tables that can be deleted. This makes it possible for authenticated attackers, with Administrator-level access and above,
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-16760 HIGH 8.8
- CVE-2026-118938 HIGH 8.8
- CVE-2026-111578 HIGH 7.5
- CVE-2026-62990 HIGH 8.7
- CVE-2026-62989 HIGH 8.1
- CVE-2026-62864 HIGH 7.5
- CVE-2026-62958 HIGH 7.9
- CVE-2026-62297 HIGH 7.5
- CVE-2026-62847 HIGH 8.2
- CVE-2026-58412 HIGH 8.2