Lucene search
+L

37 matches found

OpenVAS
OpenVAS
added 2022/08/05 12:00 a.m.18 views

WordPress WP Reset PRO Plugin <= 5.98 Multiple Vulnerabilities

The WordPress plugin Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

8.8CVSS8.3AI score0.01827EPSS
SaveExploits2References3
OSV
OSV
added 2021/11/18 3:15 p.m.9 views

CVE-2021-36908

Cross-Site Request Forgery CSRF vulnerability in WebFactory Ltd. WP Reset PRO plugin = 5.98 versions...

8.8CVSS5.8AI score0.00685EPSS
SaveExploits1References2
NVD
NVD
added 2021/11/18 3:15 p.m.19 views

CVE-2021-36908

Cross-Site Request Forgery CSRF vulnerability in WebFactory Ltd. WP Reset PRO plugin = 5.98 versions...

8.8CVSS0.00685EPSS
SaveExploits1References2
Prion
Prion
added 2021/11/18 3:15 p.m.20 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in WebFactory Ltd. WP Reset PRO plugin = 5.98 versions...

6.8CVSS8.7AI score0.00685EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2021/11/18 2:41 p.m.57 views

CVE-2021-36909

CVE-2021-36909 concerns WordPress WP Reset PRO Premium plugin (versions

8.8CVSS8AI score0.01827EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2021/11/18 2:41 p.m.24 views

CVE-2021-36909 WordPress WP Reset PRO Premium plugin <= 5.98 - Authenticated Database Reset vulnerability

Authenticated Database Reset vulnerability in WordPress WP Reset PRO Premium plugin versions = 5.98 allows any authenticated user to wipe the entire database regardless of their authorization. It leads to a complete website reset and takeover...

8.8CVSS8.8AI score0.01827EPSS
SaveExploits1References3
CVE
CVE
added 2021/11/18 2:37 p.m.63 views

CVE-2021-36908

The CVE-2021-36908 affects WebFactory Ltd. WP Reset PRO plugin for WordPress, specifically versions

8.8CVSS8.9AI score0.00685EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2021/11/18 12:00 a.m.8 views

WordPress plugin WP Reset PRO Premium 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...

8.8CVSS7.8AI score0.01827EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2021/11/18 12:00 a.m.9 views

PT-2021-21402 · WordPress · Wp Reset Pro Premium

Name of the Vulnerable Software and Affected Versions: WP Reset PRO Premium plugin versions = 5.98 Description: The issue allows any authenticated user to reset the entire database, regardless of their authorization, leading to a complete website reset and potential takeover. Recommendations: For...

8.8CVSS7.8AI score0.01827EPSS
SaveExploits1References5
HackRead
HackRead
added 2021/11/11 7:43 p.m.28 views

Critical WordPress plugin vulnerability allowed wiping databases

By Waqas The vulnerability existed in the WP Reset PRO WordPress plugin which is used by more than 400,000 websites. This is a post from HackRead.com Read the original post: Critical WordPress plugin vulnerability allowed wiping databases...

6.9AI score
SaveExploits0
WPVulnDB
WPVulnDB
added 2021/11/10 12:00 a.m.18 views

WP Reset Pro < 5.99 - Subscriber+ Database Reset

The plugin does not have proper authorisation, allowing any authenticated users, such as subscriber, to reset the database of the blog Note: This affect only the pro version of the plugin, however both the free and pro have the same slug...

8.8CVSS7.8AI score0.01827EPSS
SaveExploits1Affected Software1
OpenVAS
OpenVAS
added 2021/07/20 12:00 a.m.15 views

WordPress WP Reset plugin < 1.90 XSS Vulnerability

The WordPress plugin Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

5.4CVSS7AI score0.00629EPSS
SaveExploits2References3
CNVD
CNVD
added 2021/07/14 12:00 a.m.6 views

WordPress plugin cross-site scripting vulnerability (CNVD-2021-52417)

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in versions...

5.4CVSS5.8AI score0.00629EPSS
SaveExploits2References1
Cvelist
Cvelist
added 2021/07/12 7:20 p.m.32 views

CVE-2021-24424 WP Reset < 1.90 - Authenticated Stored XSS

The WP Reset – Most Advanced WordPress Reset Tool WordPress plugin before 1.90 did not sanitise or escape its extradata parameter when creating a snapshot via the admin dashboard, leading to an authenticated Stored Cross-Site Scripting issue...

5.4AI score0.00629EPSS
SaveExploits2References2
CVE
CVE
added 2021/07/12 7:20 p.m.83 views

CVE-2021-24424

The CVE describes an authenticated Stored XSS in the WP Reset plugin for WordPress (versions before 1.90). The root cause is failure to sanitize/escape the extra_data parameter when creating a snapshot via the admin dashboard, enabling injected HTML/JS payloads. The vulnerability affects WP Reset

5.4CVSS5.2AI score0.00629EPSS
SaveExploits2References2Affected Software1
CNNVD
CNNVD
added 2021/07/12 12:00 a.m.9 views

WordPress 跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in versions...

5.4CVSS5.2AI score0.00629EPSS
SaveExploits2References3
Patchstack
Patchstack
added 2021/06/16 12:00 a.m.26 views

WordPress WP Reset plugin <= 1.86 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by m0ze in WordPress WP Reset plugin versions = 1.86. Solution Update the WordPress WP Reset plugin to the latest available version at least 1.90...

5.4CVSS1.9AI score0.00629EPSS
SaveExploits2References3Affected Software1
Rows per page
Query Builder