Lucene search
PRIOn knowledge basePRION:CVE-2021-24655HistoryJul 17, 2022 - 11:15 a.m.
Default credentials
2022-07-1711:15:00
PRIOn knowledge base
www.prio-n.com
9
0.001 Low
EPSS
Percentile
43.1%
The WP User Manager WordPress plugin before 2.6.3 does not ensure that the user ID to reset the password of is related to the reset key given. As a result, any authenticated user can reset the password (to an arbitrary value) of any user knowing only their ID, and gain access to their account.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wp_user_manager | lt | 2.6.3 |
Related
cve
cve
CVE-2021-24655
2022-07-17 11:15:08
nvd
nvd
CVE-2021-24655
2022-07-17 11:15:08
cnvd
cnvd
WordPress plugin WP User Manager信息泄露漏洞
2022-07-19 00:00:00
cvelist
cvelist