Lucene search
K

11 matches found

Vulnrichment
Vulnrichment
added 2025/10/07 8:23 a.m.2 views

CVE-2025-10645 WP Reset <= 2.05 - Unauthenticated Sensitive Information Exposure via wf-licensing.log

The WP Reset plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.05 via the WFLicensing::log method when debugging is enabled default. This makes it possible for unauthenticated attackers to extract sensitive license key and site data...

5.3CVSS5.5AI score0.00289EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/10/07 12:0 a.m.8 views

PT-2025-40973

Name of the Vulnerable Software and Affected Versions WP Reset versions prior to 2.06 Description The WP Reset plugin for WordPress is susceptible to exposure of sensitive information in all versions up to and including 2.05. This occurs through the WF Licensing::log method when debugging is...

5.3CVSS5.9AI score0.00289EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2023-59010

Malicious code in bioql PyPI...

5.9CVSS8.6AI score0.00704EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2024/04/09 6:58 p.m.18 views

CVE-2023-6799 WP Reset <= 2.0 - Sensitive Information Exposure due to Insufficient Randomness

The WP Reset – Most Advanced WordPress Reset Tool plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.0 via the use of insufficiently random snapshot names. This makes it possible for unauthenticated attackers to extract sensitive data...

5.9CVSS6.8AI score0.00704EPSS
Exploits0References3
Cvelist
Cvelist
added 2024/04/09 6:58 p.m.27 views

CVE-2023-6799 WP Reset <= 2.0 - Sensitive Information Exposure due to Insufficient Randomness

The WP Reset – Most Advanced WordPress Reset Tool plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.0 via the use of insufficiently random snapshot names. This makes it possible for unauthenticated attackers to extract sensitive data...

5.9CVSS5.8AI score0.00704EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/04/09 12:0 a.m.4 views

WordPress Plugin WP Reset 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security...

5.9CVSS8AI score0.00704EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2022/08/01 1:15 p.m.1 views

CVE-2022-2181

The Advanced WordPress Reset WordPress plugin before 1.6 does not escape some generated URLs before outputting them back in href attributes of admin dashboard pages, leading to Reflected Cross-Site Scripting...

6.1CVSS5.9AI score0.0055EPSS
Exploits2References2
OSV
OSV
added 2022/08/01 1:15 p.m.4 views

CVE-2022-2181

The Advanced WordPress Reset WordPress plugin before 1.6 does not escape some generated URLs before outputting them back in href attributes of admin dashboard pages, leading to Reflected Cross-Site Scripting...

6.1CVSS5.8AI score0.0055EPSS
Exploits2References1
CNNVD
CNNVD
added 2022/08/01 12:0 a.m.7 views

WordPress plugin Advanced WordPress Reset 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

6.1CVSS6AI score0.0055EPSS
Exploits2References2
OSV
OSV
added 2021/11/18 3:15 p.m.2 views

CVE-2021-36909

Authenticated Database Reset vulnerability in WordPress WP Reset PRO Premium plugin versions = 5.98 allows any authenticated user to wipe the entire database regardless of their authorization. It leads to a complete website reset and takeover...

8.1CVSS5.8AI score0.01827EPSS
Exploits1References3
CNNVD
CNNVD
added 2021/11/18 12:0 a.m.3 views

WordPress plugin WP Reset PRO Premium 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

8.8CVSS7.8AI score0.00685EPSS
Exploits1References4
Rows per page
Query Builder