webfactory Database Reset vulnerabilities (CVE)

CVE records published for webfactory Database Reset, newest first. Follow to get an email when a new one appears.

1 results

4.7Medium

CVE-2024-1501 2 years ago

Database Reset <= 3.22 - Cross-Site Request Forgery to WP Reset Plugin Installation

webfactory Database Reset

The Database Reset plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.22. This is due to missing or incorrect nonce validation on the install_wpr() function. This makes it possible for unauthenticated atta…