Password Recovery Project vulnerabilities
We track 1 vulnerability in Password Recovery Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 4, 2023.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Password Recovery Project vulnerabilities
- 7.5 High severity
Password Recovery Plugin: Weak Password Recovery Mechanism for Forgotten Password
Vulnerability in the password recovery mechanism of Password Recovery plugin for Roundcube, in its 1.2 version, which could allow a remote attacker to change an existing user´s password by adding a 6-digit numeric token. An attacker could create an automatic s