LogixFast Auth vulnerabilities
We track 1 vulnerability in LogixFast Auth products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 29, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest LogixFast Auth vulnerabilities
- 9.8 Critical severity
LogixFast Auth: Improper Privilege Management
The LogixFast Auth WordPress plugin before 1.0.4 does not deliver its password-reset one-time code to the resolved account's own email address, mailing it to the address supplied in the request instead, allowing unauthenticated attackers to reset any user's pa