CVE-2023-6799

CVE-2023-6799 affects the WP Reset plugin for WordPress (versions up to 2.0). The root cause is insufficiently random snapshot names, enabling unauthenticated attackers to brute-force and extract sensitive data such as backups. The risk is tied to Information Exposure (C), with no vendor hardenin...

CVE-2021-24424

The CVE describes an authenticated Stored XSS in the WP Reset plugin for WordPress (versions before 1.90). The root cause is failure to sanitize/escape the extra_data parameter when creating a snapshot via the admin dashboard, enabling injected HTML/JS payloads. The vulnerability affects WP Reset

CVE-2024-4661

CVE-2024-4661 (WP Reset) – WordPress Plugin . Vulnerability due to missing capability check in the save_ajax function across versions up to 2.02, enabling authenticated users with subscriber-level access and above to modify the value of the “License Key” field under the Activate Pro License setti...