CVE-2020-28642
9.8CRITICALIn InfiniteWP Admin Panel before 3.1.12.3, resetPasswordSendMail generates a weak password-reset code, which makes it easier for remote attackers to conduct admin Account Takeover attacks.
Publicado: 11/16/2020Actualizado: 11/21/2024
Descripción
In InfiniteWP Admin Panel before 3.1.12.3, resetPasswordSendMail generates a weak password-reset code, which makes it easier for remote attackers to conduct admin Account Takeover attacks.
Análisis IAImpulsado por IA
Productos Afectados
infinitewpinfinitewp
Referencias
- https://www.whitehack.de/advisories/HWADV2020-001.txtThird Party Advisory
- https://www.whitehack.de/advisories/HWADV2020-001.txtThird Party Advisory