High

DATE	CVE	VULNERABILITY TITLE	RISK
2021-11-18	CVE-2021-36908	Cross-Site Request Forgery (CSRF) vulnerability in Webfactoryltd WP Reset PRO Cross-Site Request Forgery (CSRF) vulnerability in WebFactory Ltd. network low complexity webfactoryltd CWE-352	8.8
2021-11-18	CVE-2021-36909	Missing Authorization vulnerability in Webfactoryltd WP Reset PRO Authenticated Database Reset vulnerability in WordPress WP Reset PRO Premium plugin (versions <= 5.98) allows any authenticated user to wipe the entire database regardless of their authorization. network low complexity webfactoryltd CWE-862	8.1