CVE-2020-28642

In InfiniteWP Admin Panel before 3.1.12.3, resetPasswordSendMail generates a weak password-reset code, which makes it easier for remote attackers to conduct admin Account Takeover attacks...

CVE-2020-28642: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

In InfiniteWP Admin Panel before 3.1.12.3, resetPasswordSendMail generates a weak password-reset code, which makes it easier for remote attackers to conduct admin Account Takeover attacks...

PT-2020-17023

Name of the Vulnerable Software and Affected Versions InfiniteWP Admin Panel versions prior to 3.1.12.3 Description The issue allows remote attackers to conduct admin Account Takeover attacks due to a weak password-reset code generated by the resetPasswordSendMail function. This makes it easier f...