CVE-2020-28642
9.8CRITICALIn InfiniteWP Admin Panel before 3.1.12.3, resetPasswordSendMail generates a weak password-reset code, which makes it easier for remote attackers to conduct admin Account Takeover attacks.
Veröffentlicht: 11/16/2020Aktualisiert: 11/21/2024
Beschreibung
In InfiniteWP Admin Panel before 3.1.12.3, resetPasswordSendMail generates a weak password-reset code, which makes it easier for remote attackers to conduct admin Account Takeover attacks.
KI-AnalyseKI-gestützt
Betroffene Produkte
infinitewpinfinitewp
Referenzen
- https://www.whitehack.de/advisories/HWADV2020-001.txtThird Party Advisory
- https://www.whitehack.de/advisories/HWADV2020-001.txtThird Party Advisory