Skip to content
Sign in
5.3 Medium

CVE-2025-10645 The WP Reset plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and…

Description

The WP Reset plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.05 via the WF_Licensing::log() method when debugging is enabled (default). This makes it possible for unauthenticated attackers to extract sensitive license key and site data.

Affected products and versions

Product Affected versions Fixed in
WP Reset 2.05 earliest → 2.05 No fix stated

Other CVEs of WP Reset

The 3 CVEs of WP Reset →
CVE-2024-4661 The WP Reset plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check… 4.3 Medium CVE-2023-6799 The WP Reset – Most Advanced WordPress Reset Tool plugin for WordPress is vulnerable to Sensitive Information Exposure… 5.9 Medium
Track this CVE