CVE-2026-119615

The Reset Database plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.1.3. This is due to the processreset function being registered on admininit with no capability check, a computed-but-unused nonce, a gating condition that passes whenever no WordPress...

EUVD-2026-123363

The Reset Database plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.1.3. This is due to the processreset function being registered on admininit with no capability check, a computed-but-unused nonce, a gating condition that passes whenever no WordPress...

CVE-2026-119615

The Reset Database plugin for WordPress is vulnerable to privilege escalation in versions up to and including 1.1.3 . The root cause lies in the process_reset() function, which is registered on admin_init without a capability check or a functional nonce check . Additionally, the function contains...

CVE-2026-119615 Reset Database <= 1.1.3 - Authenticated (Subscriber+) Privilege Escalation to Missing Capability and Nonce Check in process_reset()

The Reset Database plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.1.3. This is due to the processreset function being registered on admininit with no capability check, a computed-but-unused nonce, a gating condition that passes whenever no WordPress...

WordPress Reset Database plugin <= 1.1.3 - Authenticated (Subscriber+) Privilege Escalation to Missing Capability and Nonce Check in process_reset() vulnerability

Authenticated Subscriber+ Privilege Escalation to Missing Capability and Nonce Check in processreset vulnerability discovered by Robert Huzo HuzoSecurity in WordPress Plugin Reset Database versions = 1.1.3...

PT-2026-145132

The Reset Database plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.1.3. This is due to the process reset function being registered on admin init with no capability check, a computed-but-unused nonce, a gating condition that passes whenever no WordPre...

CVE-2026-119615: maltesesolutions Reset Database: The Reset Database plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.1.3

The Reset Database plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.1.3. This is due to the processreset function being registered on admininit with no capability check, a computed-but-unused nonce, a gating condition that passes whenever no WordPress...

CVE-2025-15563

Any unauthenticated user can reset the WorkTime on-prem database configuration by sending a specific HTTP request to the WorkTime server. No authorization check is applied here...

CVE-2025-15563

Any unauthenticated user can reset the WorkTime on-prem database configuration by sending a specific HTTP request to the WorkTime server. No authorization check is applied here...

PT-2024-23319 · Mintplex · Anything-Llm

Name of the Vulnerable Software and Affected Versions: mintplex-labs/anything-llm versions prior to 1.0.0 Description: An improper authorization issue exists in the mintplex-labs/anything-llm application, specifically within the "/api/v/" endpoint and its sub-routes. This flaw allows...

SIEMENS SICAM PAS Local Security Bypass Vulnerability

SICAM PAS is an energy automation solution for the operation of substation equipment. It has open communication interfaces for power system control and control of industrial power supply equipment. A local security bypass vulnerability exists in SIEMENS SICAM PAS. An authenticated local attacker...