CVE-2023-6799

The WP Reset – Most Advanced WordPress Reset Tool plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.0 via the use of insufficiently random snapshot names. This makes it possible for unauthenticated attackers to extract sensitive data including site backups by brute-forcing the snapshot filenames. Please note that the vendor does not plan to do any further hardening on this functionality.

• CWE-330
• CWE-330

• https://plugins.trac.wordpress.org/changeset?old_path=/wp-reset/tags/1.99&old=3059287&new_path=/wp-reset/tags/2.0&new=3059287&sfp_email=&sfph_mail=Product
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3071811%40wp-reset&new=3071811%40wp-reset&sfp_email=&sfph_mail=Patch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/68f41e88-ed36-4361-bddd-41495a540cd9?source=cveThird Party Advisory
• https://plugins.trac.wordpress.org/changeset?old_path=/wp-reset/tags/1.99&old=3059287&new_path=/wp-reset/tags/2.0&new=3059287&sfp_email=&sfph_mail=Product
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3071811%40wp-reset&new=3071811%40wp-reset&sfp_email=&sfph_mail=Patch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/68f41e88-ed36-4361-bddd-41495a540cd9?source=cveThird Party Advisory

Published

Apr 9, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-6791A credential disclosure vulnerability in Palo Alto Networks …4.9
• CVE-2023-6792An OS command injection vulnerability in the XML API of Palo…6.3
• CVE-2023-6793An improper privilege management vulnerability in Palo Alto …2.7
• CVE-2023-6794An arbitrary file upload vulnerability in Palo Alto Networks…4.7
• CVE-2023-6795An OS command injection vulnerability in Palo Alto Networks …4.7
• CVE-2023-6798The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, N…5.4
• CVE-2023-6801The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, N…5.4
• CVE-2023-6802An insertion of sensitive information into the log file in t…6.5
• CVE-2023-6803A race condition in GitHub Enterprise Server allows an outsi…4
• CVE-2023-6804Improper privilege management allowed arbitrary workflows to…5.5
• CVE-2023-6805The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, N…6.4
• CVE-2023-6806The Starbox plugin for WordPress is vulnerable to Stored Cro…5.4