Skip to content
OpenAdvisories

Vendor

rubenw

1 known vulnerabilities.

Products

Bulk Password Reset 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.0
    CVE-2026-14873

    Bulk Password Reset <= 1.3.3 - Authenticated (Subscriber+) Arbitrary Password Reset

    The Bulk Password Reset plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.3.3. This is due to the plugin not properly validating a user's identity prior to updating their details like arbit…

    rubenw Bulk Password Reset Web / CMS