CVE-2026-71625

An issue in slimkit plus ThinkSNS+ v.2.4 allows a remote attacker to escalate privileges via the ResetPasswordController.php component...

CVE-2026-71625

An issue in slimkit plus ThinkSNS+ v.2.4 allows a remote attacker to escalate privileges via the ResetPasswordController.php component...

EUVD-2026-71743

An issue in slimkit plus ThinkSNS+ v.2.4 allows a remote attacker to escalate privileges via the ResetPasswordController.php component...

CVE-2026-71625

An issue in slimkit plus ThinkSNS+ v.2.4 allows a remote attacker to escalate privileges via the ResetPasswordController.php component...

PT-2026-86248

An issue in slimkit plus ThinkSNS+ v.2.4 allows a remote attacker to escalate privileges via the ResetPasswordController.php component...

CVE-2026-71625

An issue in slimkit plus ThinkSNS+ v.2.4 allows a remote attacker to escalate privileges via the ResetPasswordController.php component. The vulnerability allows for account takeover via an expired verification code during the password reset process. Practical consequences include unauthorized acc...

Information Disclosure

pagekit/pagekit is vulnerable to information disclosure. The vulnerability exists as the ResetPasswordController returns an Unknown email address. message when an email is not in the user database...