10 matches found
CVE-2026-128047
OpenMage magento-lts before 20.18.2 and 21.0.0-beta pre-releases before 21.0.0-beta3 generate customer email-confirmation keys with md5uniqid and customer and administrator password-reset tokens with the non-cryptographic uniqHash. Unauthenticated attackers can brute-force the roughly 20-bit...
CVE-2026-128047 OpenMage magento-lts before 20.18.2 Account Takeover via Predictable Confirmation Key
OpenMage magento-lts before 20.18.2 and 21.0.0-beta pre-releases before 21.0.0-beta3 generate customer email-confirmation keys with md5uniqid and customer and administrator password-reset tokens with the non-cryptographic uniqHash. Unauthenticated attackers can brute-force the roughly 20-bit...
EUVD-2026-125061
OpenMage magento-lts before 20.18.2 and 21.0.0-beta pre-releases before 21.0.0-beta3 generate customer email-confirmation keys with md5uniqid and customer and administrator password-reset tokens with the non-cryptographic uniqHash. Unauthenticated attackers can brute-force the roughly 20-bit...
CVE-2026-128047
The OpenMage magento-lts platform versions before 20.18.2 and 21.0.0-beta pre-releases before 21.0.0-beta3 are vulnerable to an account takeover due to predictable confirmation keys . The root cause is the use of insufficiently random values, specifically generating customer email-confirmation ke...
PT-2026-146530
Name of the Vulnerable Software and Affected Versions OpenMage magento-lts versions prior to 20.18.2 OpenMage magento-lts versions prior to 21.0.0-beta3 Description Customer email-confirmation keys are generated using md5uniqid, while customer and administrator password-reset tokens use the...
WPS Hide Login <= 1.5.2.2 - Login Page Bypass Detection
WPS-Hide-Login plugin before 1.5.3 for WordPress contains an action=confirmaction protection bypass, letting attackers bypass security checks, exploit requires sending crafted requests. !/usr/bin/env python3 -- coding: utf-8 -- """WPS-Hide-Login plugin before 1.""" from kittysploit import from...
CVE-2019-15823
The wps-hide-login plugin before 1.5.3 for WordPress has an action=confirmaction protection bypass...
CVE-2019-15823
The wps-hide-login plugin before 1.5.3 for WordPress has an action=confirmaction protection bypass...
