High · 8.8 CVE-2021-36908 EUVD-2021-23484GHSA-h25v-fr72-m765

WordPress WP Reset PRO Premium Plugin <= 5.98 - Cross-Site Request Forgery (CSRF) vulnerability

Published Nov 18, 2021 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: webfactory Product: WP Reset PRO

Description

Cross-Site Request Forgery (CSRF) vulnerability in WebFactory Ltd. WP Reset PRO plugin <= 5.98 versions.

Affected products

Vendor	Product	Affected	Fixed
WebFactory	WP Reset PRO	≤ 5.98	—

References

https://patchstack.com/database/vulnerability/wp-reset/wordpress-wp-reset-pro-premium-plugin-5-98-cross-site-request-forgery-csrf-vulnerability-leading-to-database-reset?_s_id=cve vdb-entry
https://patchstack.com/wp-reset-pro-critical-vulnerability-fixed/ technical-description third-party-advisory