EUVD-2026-71743

An issue in slimkit plus ThinkSNS+ v.2.4 allows a remote attacker to escalate privileges via the ResetPasswordController.php component...

CVE-2026-71625

ThinkSNS+ v.2.4 (slimkit plus) contains a privilege escalation vulnerability in the ResetPasswordController.php component. A remote attacker can exploit this to escalate privileges, with the referenced advisory further describing the mechanism as account takeover via an expired verification code ...

PT-2026-86248

An issue in slimkit plus ThinkSNS+ v.2.4 allows a remote attacker to escalate privileges via the ResetPasswordController.php component...

Information Disclosure

pagekit/pagekit is vulnerable to information disclosure. The vulnerability exists as the ResetPasswordController returns an Unknown email address. message when an email is not in the user database...