Filtered by vendor Webfactoryltd
Subscriptions
Filtered by product Wp Reset
Subscriptions
Total
2 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2024-4661 | 1 Webfactoryltd | 1 Wp Reset | 2024-11-21 | 4.3 Medium |
| The WP Reset plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_ajax function in all versions up to, and including, 2.02. This makes it possible for authenticated attackers, with subscriber-level access and above, to modify the value fo the 'License Key' field for the 'Activate Pro License' setting. | ||||
| CVE-2021-24424 | 1 Webfactoryltd | 1 Wp Reset | 2024-11-21 | 5.4 Medium |
| The WP Reset – Most Advanced WordPress Reset Tool WordPress plugin before 1.90 did not sanitise or escape its extra_data parameter when creating a snapshot via the admin dashboard, leading to an authenticated Stored Cross-Site Scripting issue | ||||
Page 1 of 1.