bulk_password_reset vulnerabilities

CVEs whose affected-version data names the bulk_password_reset package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-14873High· 8.0

1w ago

The Bulk Password Reset plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.3.3

The Bulk Password Reset plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.3.3. This is due to the plugin not properly validating a user's identity prior to updating th…

▾ Twilightrubenw · Bulk Password ResetEPSS 0.24%via NVD