CVE-2020-7047: Webfactoryltd Wp Database Reset

High severity, CVSS 8.8. EPSS: 2.5% chance of exploitation in the next 30 days.

The WordPress plugin, WP Database Reset through 3.1, contains a flaw that gave any authenticated user, with minimal permissions, the ability (with a simple wp-admin/admin.php?db-reset-tables[]=users request) to escalate their privileges to administrator while dropping all other users from the table.

Affected products

• Webfactoryltd Wp Database Reset: up to and including 3.1

Published 2020-01-16. Last modified 2026-06-17.