The Reset Database plugin for WordPress versions up to and including 1.1.3 contains a privilege escalation vulnerability. This flaw arises from improper capability checks in the process_reset() function, allowing authenticated users with subscriber-level access or higher to escalate privileges. Exploitation enables the attacker to drop all prefixed database tables, reinstall WordPress with attacker-controlled credentials, gain sole administrator access, and delete the uploads directory.