CVE Intelligence

Webfactory WP Reset vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Webfactory WP Reset: 1 record(s), with affected versions and fixes.

CVE-2025-10645 Medium · 5.3 CWE-532 Oct 7, 2025
WP Reset <= 2.05 - Unauthenticated Sensitive Information Exposure via wf-licensing.log
The WP Reset plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.05 via the WF_Licensing::log() method when debugging is enabled (default). This makes it possible for unauthenticated attackers to extract sensitive license key and site data.