Vulnerabilidades do Webfactory WP Reset
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Webfactory WP Reset: 1 registro(s), com versões afetadas e correções.
CVE-2025-10645
Média · 5.3
CWE-532 07/10/2025
WP Reset <= 2.05 - Unauthenticated Sensitive Information Exposure via wf-licensing.log
The WP Reset plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.05 via the WF_Licensing::log() method when debugging is enabled (default). This makes it possible for unauthenticated attackers to extract sensitive license key and site data.