CVE-2023-6799

Name of the Vulnerable Software and Affected Versions The WP Reset – Most Advanced WordPress Reset Tool plugin for WordPress versions up to, and including, 2.0

Description The issue allows unauthenticated attackers to extract sensitive data, including site backups, by brute-forcing snapshot filenames due to insufficiently random snapshot names. The vendor does not plan to do any further hardening on this functionality.

Recommendations For versions up to, and including, 2.0, consider disabling the snapshot functionality until a more secure alternative is available, as the vendor does not plan to release further security enhancements for this feature.