Custom Searchable Data Entry System Vulnerabilities

[en] The Custom Searchable Data Entry System plugin for WordPress is vulnerable to unauthenticated database wiping in versions up to, and including 1.7.1, due to a missing capability check and lack of sufficient validation on the ghazale_sds_delete_entries_table_row() function. This makes it possible for unauthenticate...

Affected:

up to *

Fix:

No patched version reported

Disclosed:

Oct 1, 2025

CVE-2020-36852 on NVD →

The custom-searchable-data-entry-system (aka Custom Searchable Data Entry System) plugin through 1.7.1 for WordPress allows SQL Injection. NOTE: this product is discontinued.

CVSS:

9.8

Affected:

up to 1.7.1

Fix:

No patched version reported

Disclosed:

Mar 27, 2020

CVE-2020-10817 on NVD →

[en] The custom-searchable-data-entry-system (aka Custom Searchable Data Entry System) plugin through 1.7.1 for WordPress allows SQL Injection. NOTE: this product is discontinued.

Affected:

up to 1.7.1

Fixed in:

1.7.1

Disclosed:

Mar 27, 2020

CVE-2020-10817 on NVD →

The Custom Searchable Data Entry System plugin for WordPress is vulnerable to unauthenticated database wiping in versions up to, and including 1.7.1, due to a missing capability check and lack of sufficient validation on the ghazale_sds_delete_entries_table_row() function. This makes it possible for unauthenticated att...

CVSS:

9.1

Affected:

up to 1.7.1

Fix:

No patched version reported

Disclosed:

Mar 6, 2020

CVE-2020-36852 on NVD →

The Custom Searchable Data Entry System plugin for WordPress is vulnerable to unauthenticated database wiping in versions up to, and including 1.7.1, due to a missing capability check and lack of sufficient validation on the ghazale_sds_delete_entries_table_row() function. This makes it possible for unauthenticated att...

Affected:

up to 1.7.1

Fix:

No patched version reported

Disclosed:

Mar 6, 2020