CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2 matches found

Cvelist•added 2020/11/16 1:19 a.m.•33 views

CVE-2020-28642

In InfiniteWP Admin Panel before 3.1.12.3, resetPasswordSendMail generates a weak password-reset code, which makes it easier for remote attackers to conduct admin Account Takeover attacks...

9.4AI score0.02555EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2020/11/16 12:00 a.m.•3 views

CVE-2020-28642: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

In InfiniteWP Admin Panel before 3.1.12.3, resetPasswordSendMail generates a weak password-reset code, which makes it easier for remote attackers to conduct admin Account Takeover attacks...

9.8CVSS5.8AI score0.02555EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by