2 matches found
Sql injection
The UserPro plugin for WordPress is vulnerable to unauthorized password resets in versions up to, and including 5.1.1. This is due to the plugin using native password reset functionality, with insufficient validation on the password reset function userproprocessform. The function uses the plainte...
7.5CVSS6.5AI score0.00903EPSS
SaveExploits2References3Affected Software1
CVE-2023-2449 UserPro <= 5.1.1 - Insecure Password Reset Mechanism
The UserPro plugin for WordPress is vulnerable to unauthorized password resets in versions up to, and including 5.1.1. This is due to the plugin using native password reset functionality, with insufficient validation on the password reset function userproprocessform. The function uses the plainte...
9.8CVSS7.8AI score0.00902EPSS
SaveExploits2References2
20