CVE-2021-36909: Webfactoryltd Wp Reset Pro

High severity, CVSS 8.1. EPSS: 1.9% chance of exploitation in the next 30 days.

Authenticated Database Reset vulnerability in WordPress WP Reset PRO Premium plugin (versions <= 5.98) allows any authenticated user to wipe the entire database regardless of their authorization. It leads to a complete website reset and takeover.

Affected products

• Webfactoryltd Wp Reset Pro: up to and including 5.98

Published 2021-11-18. Last modified 2026-06-17.