Skip to content
OpenAdvisories
High · 8.8 CVE-2021-36909 EUVD-2021-23485GHSA-xjf9-fcqr-8q9x

WordPress WP Reset PRO Premium plugin <= 5.98 - Authenticated Database Reset vulnerability

Published Nov 18, 2021 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Authenticated Database Reset vulnerability in WordPress WP Reset PRO Premium plugin (versions <= 5.98) allows any authenticated user to wipe the entire database regardless of their authorization. It leads to a complete website reset and takeover.

Affected products

VendorProductAffectedFixed
WebFactory WP Reset PRO <= 5.98 – ≤ 5.98 —

References