https://feed.craftedsignal.io/products/reset-database-up-to-and-including-1.1.3/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 11 Nov 2026 13:55:28 +0000https://feed.craftedsignal.io/favicon-32x32.pnghttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svghttps://feed.craftedsignal.io/briefs/2026-11-reset-database-privilege-escalation-cve-2026-119615/Wed, 11 Nov 2026 13:55:28 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-reset-database-privilege-escalation-cve-2026-119615/The Reset Database plugin for WordPress up to and including version 1.1.3 is vulnerable to privilege escalation due to a lack of capability checks in the process_reset() function.<p>CVE-2026-119615 affects the Reset Database plugin for WordPress in versions up to and including 1.1.3. The vulnerability exists because the process_reset() function is registered on admin_init without capability checks. Authenticated attackers with subscriber-level access and above can drop database tables, re-run wp_install() with their own credentials to become the site administrator, authenticate as that administrator, and delete the uploads directory.</p> highadvisory