TI-2026-12541 CVE-2026-14873 · GHSA-c66v-c2xg-68hr
Bulk Password Reset <= 1.3.3 - Authenticated (Subscriber+) Arbitrary Password Reset
Priority LOW 35
The Bulk Password Reset plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.3.3.