Bulk Password Reset vulnerabilities
1 known vulnerability in Bulk Password Reset from Rubenw. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.0average CVSS score
Latest first
- 8.0 High severity
Bulk Password Reset: Missing Authorization
The Bulk Password Reset plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.3.3. This is due to the plugin not properly validating a user's identity prior to updating their details like arbitr