Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbWpvulndbWPVDB-ID:0349B131-58D3-4596-82BC-6705B5EC962F
HistoryNov 10, 2021 - 12:00 a.m.

WP Reset Pro < 5.99 - Database Reset via CSRF

2021-11-1000:00:00
wpscan.com
23

0.001 Low

EPSS

Percentile

47.9%

JSON

The plugin does not have CSRF check when resetting the database, which could allow attacker to make logged in users reset it Note: This affect only the pro version of the plugin, however both the free and pro have the same slug.

CPENameOperatorVersion
wp-resetlt5.99

Related

nvd 1
cvelist 1
patchstack 1
prion 1
cve 1
openvas 1
nvd
nvd
CVE-2021-36908
2021-11-18 15:15:09
cvelist
cvelist
CVE-2021-36908 WordPress WP Reset PRO Premium Plugin <= 5.98 - Cross-Site Request Forgery (CSRF) vulnerability
2021-11-10 00:00:00
patchstack
patchstack
WordPress WP Reset PRO Premium Plugin <= 5.98 - Cross-Site Request Forgery (CSRF) vulnerability leading to Database Reset
2021-11-10 00:00:00
prion
prion
Cross site request forgery (csrf)
2021-11-18 15:15:00
cve
cve
CVE-2021-36908
2021-11-18 15:15:09
openvas
openvas
WordPress WP Reset PRO Plugin <= 5.98 Multiple Vulnerabilities
2022-08-05 00:00:00

0.001 Low

EPSS

Percentile

47.9%

JSON
Related for WPVDB-ID:0349B131-58D3-4596-82BC-6705B5EC962F
nvd1cvelist1patchstack1prion1cve1openvas1