CVE-2026-119615

The Reset Database plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.1.3. This is due to the processreset function being registered on admininit with no capability check, a computed-but-unused nonce, a gating condition that passes whenever no WordPress...

EUVD-2026-123363

The Reset Database plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.1.3. This is due to the processreset function being registered on admininit with no capability check, a computed-but-unused nonce, a gating condition that passes whenever no WordPress...

CVE-2026-119615 Reset Database <= 1.1.3 - Authenticated (Subscriber+) Privilege Escalation to Missing Capability and Nonce Check in process_reset()

The Reset Database plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.1.3. This is due to the processreset function being registered on admininit with no capability check, a computed-but-unused nonce, a gating condition that passes whenever no WordPress...

CVE-2026-119615: maltesesolutions Reset Database: The Reset Database plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.1.3

The Reset Database plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.1.3. This is due to the processreset function being registered on admininit with no capability check, a computed-but-unused nonce, a gating condition that passes whenever no WordPress...