CVE-2021-36909

Description

Authenticated Database Reset vulnerability in WordPress WP Reset PRO Premium plugin (versions <= 5.98) allows any authenticated user to wipe the entire database regardless of their authorization. It leads to a complete website reset and takeover.

References

https://wpreset.com/changelog/

https://patchstack.com/wp-reset-pro-critical-vulnerability-fixed/

https://patchstack.com/database/vulnerability/wp-reset/wordpress-wp-reset-pro-premium-plugin-5-98-authenticated-database-reset-vulnerability

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS