1 matches found
WordPress AutomatorWP Pro Webhooks addon plugin <= 1.4.4 - Missing Authorization to Unauthenticated Arbitrary User Password Reset / Account Takeover via Webhook with 'Is the user ID' Field vulnerability
Missing Authorization to Unauthenticated Arbitrary User Password Reset / Account Takeover via Webhook with 'Is the user ID' Field vulnerability discovered by 0xd4rk5id3 - EnvoraSec in WordPress Plugin AutomatorWP Pro Webhooks versions = 1.4.4...
9.8CVSS6AI score
SaveExploits0References1Affected Software1
20