CVE-2020-7047

CVE-2020-7047 describes a critical privilege escalation vulnerability in the WordPress plugin, WP Database Reset through version 3.1. This flaw allows any authenticated user, even with minimal permissions, to elevate their privileges to administrator by manipulating a specific URL request, simultaneously deleting all other user accounts. With a CVSS score of 8.8 (High), this vulnerability is easily exploitable over the network with low attack complexity, leading to complete compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, its high FAUCET Risk Score of 72/100 and significant media coverage, including reports of nearly 200,000 affected sites, indicate a serious threat. Despite no public exploit code in Metasploit, Nuclei, or ExploitDB, the straightforward nature of the exploit suggests it could be easily replicated, warranting immediate patching.