WHIZZ vulnerabilities
We track 1 vulnerability in WHIZZ products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 6, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest WHIZZ vulnerabilities
- 9.8 Critical severity
WHIZZ: Improper Privilege Management
The WHIZZ WordPress plugin through 1.1.8 does not validate the password-reset key before updating a user's password, relying only on a nonce that is exposed to unauthenticated visitors, allowing attackers to set an arbitrary password for any user, including ad