Password Recovery Plugin vulnerabilities

1 known vulnerability in Password Recovery Plugin from AlfnRU. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Password Recovery Plugin: Weak Password Recovery Mechanism for Forgotten Password

  CVE-2023-3222Sep 4, 2023AlfnRU

  Vulnerability in the password recovery mechanism of Password Recovery plugin for Roundcube, in its 1.2 version, which could allow a remote attacker to change an existing user´s password by adding a 6-digit numeric token. An attacker could create an automatic s