CVE-2024-12827

🗓️ 27 Jun 2025 08:23:57Reported by WordfenceType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 19 Views

DWT WordPress theme prior to 3.3.6 allows unauthenticated password resets for any user account.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2024-12827	27 Jun 202508:52	–	circl
CNNVD	WordPress plugin DWT - Directory & Listing security vulnerability	27 Jun 202500:00	–	cnnvd
Cvelist	CVE-2024-12827 DWT - Directory & Listing WordPress Theme <= 3.3.6 - Unauthenticated Arbitrary User Password Reset	27 Jun 202508:23	–	cvelist
EUVD	EUVD-2024-54708	3 Oct 202520:07	–	euvd
NVD	CVE-2024-12827	27 Jun 202509:15	–	nvd
Patchstack	WordPress DWT - Directory & Listing WordPress Theme plugin <= 3.3.6 - Unauthenticated Arbitrary User Password Reset vulnerability	26 Jun 202522:44	–	patchstack
Patchstack	WordPress DWT - Directory & Listing Theme <= 3.3.6 is vulnerable to Privilege Escalation	26 Jun 202500:00	–	patchstack
Positive Technologies	PT-2025-27070 · WordPress · Dwt - Directory & Listing Wordpress Theme	27 Jun 202500:00	–	ptsecurity
RedhatCVE	CVE-2024-12827	29 Jun 202508:24	–	redhatcve
Vulnrichment	CVE-2024-12827 DWT - Directory & Listing WordPress Theme <= 3.3.6 - Unauthenticated Arbitrary User Password Reset	27 Jun 202508:23	–	vulnrichment

Vulners

Node

scriptsbundle dwt_-_directory_&_listing_wordpress_themeRange≤3.3.6wordpress

[
  {
    "vendor": "scriptsbundle",
    "product": "DWT - Directory & Listing WordPress Theme",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "3.3.6",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/51fc7d47-2a0f-4713-9859-120321aa32dc
themeforest	www.themeforest.net/item/dwt-listing-directory-listing-wordpress-theme/21976132

15 Apr 2026 00:35Current

7.6High risk

Vulners AI Score7.6

CVSS 3.19.8

EPSS0.00583

SSVC

CWE-620