CVE-2026-18030

The BricksForge WordPress plugin before 3.1.8.8 does not verify the identity of the requester when processing a password change submitted through one of its form actions, allowing unauthenticated attackers to set an arbitrary password for any user, including administrators, and take over their...

PT-2026-69368

Name of the Vulnerable Software and Affected Versions BricksForge WordPress plugin versions prior to 3.1.8.8 Description An issue exists where the plugin fails to verify the identity of the requester during a password change submitted via a form action. This allows unauthenticated attackers to se...

CVE-2023-34869

PHPJabbers Catering System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /index.php?controller=pjAdmin=pjActionForgot...

PT-2015-5322

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection Manager SEPM versions 12.1 through 12.1 before 12.1-RU6-MP1 Description The issue allows remote attackers to bypass authentication via a crafted password-reset action that triggers a new administrative session in t...

CVE-2015-1486: Improper Authentication

The management console in Symantec Endpoint Protection Manager SEPM 12.1 before 12.1-RU6-MP1 allows remote attackers to bypass authentication via a crafted password-reset action that triggers a new administrative session...