EPSS
Percentile
9.0%
The plugin does not validate password to be updated, allowing any authenticated user, such as subscriber to set the password of another user.