CVE-2020-28642
9.8CRITICALIn InfiniteWP Admin Panel before 3.1.12.3, resetPasswordSendMail generates a weak password-reset code, which makes it easier for remote attackers to conduct admin Account Takeover attacks.
Publicado: 11/16/2020Atualizado: 11/21/2024
Descrição
In InfiniteWP Admin Panel before 3.1.12.3, resetPasswordSendMail generates a weak password-reset code, which makes it easier for remote attackers to conduct admin Account Takeover attacks.
Análise IADesenvolvido por IA
Produtos Afetados
infinitewpinfinitewp
Referências
- https://www.whitehack.de/advisories/HWADV2020-001.txtThird Party Advisory
- https://www.whitehack.de/advisories/HWADV2020-001.txtThird Party Advisory