high8.8
CVE-2021-36909
Authenticated Database Reset vulnerability in WordPress WP Reset PRO Premium plugin (versions <= 5.98) allows any authenticated user to wipe the entire databas…
Impact
Authenticated Database Reset vulnerability in WordPress WP Reset PRO Premium plugin (versions <= 5.98) allows any authenticated user to wipe the entire database regardless of their authorization. It leads to a complete website reset and takeover.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Webfactoryltd | Wp Reset Pro | through 5.98 |
Weakness classification
References
- NVD record
- CVE.org record
- https://patchstack.com/database/vulnerability/wp-reset/wordpress-wp-reset-pro-premium-plugin-5-98-authenticated-database-reset-vulnerability
- https://patchstack.com/wp-reset-pro-critical-vulnerability-fixed/
- https://wpreset.com/changelog/
- https://patchstack.com/database/vulnerability/wp-reset/wordpress-wp-reset-pro-premium-plugin-5-98-authenticated-database-reset-vulnerability
- https://patchstack.com/wp-reset-pro-critical-vulnerability-fixed/
- https://wpreset.com/changelog/