Description (CNA)
Authenticated Database Reset vulnerability in WordPress WP Reset PRO Premium plugin (versions <= 5.98) allows any authenticated user to wipe the entire database regardless of their authorization. It leads to a complete website reset and takeover.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| WebFactory Ltd. / WP Reset PRO | affected <= 5.98 through 5.98 |
CWE
CWE-284
References
- https://wpreset.com/changelog/
- https://patchstack.com/database/vulnerability/wp-reset/wordpress-wp-reset-pro-premium-plugin-5-98-authenticated-database-reset-vulnerability
- https://patchstack.com/wp-reset-pro-critical-vulnerability-fixed/
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.