Lucene search
PRIOn knowledge basePRION:CVE-2023-4214HistoryNov 18, 2023 - 2:15 a.m.
Default credentials
2023-11-1802:15:00
PRIOn knowledge base
www.prio-n.com
4
apppresser
wordpress
vulnerability
password reset
unauthorized access
The AppPresser plugin for WordPress is vulnerable to unauthorized password resets in versions up to, and including 4.2.5. This is due to the plugin generating too weak a reset code, and the code used to reset the password has no attempt or time limit.
| CPE | Name | Operator | Version |
|---|---|---|---|
| apppresser | lt | 4.3.0 |
References
plugins.trac.wordpress.org/browser/apppresser/trunk/inc/AppPresser_API_Limit.php?rev=2997182
plugins.trac.wordpress.org/browser/apppresser/trunk/inc/AppPresser_WPAPI_Mods.php
plugins.trac.wordpress.org/changeset/2997160/apppresser
www.wordfence.com/threat-intel/vulnerabilities/id/4c44c36a-c4c7-49c2-b750-1589e7840dde?source=cve
Related
cve
cve
CVE-2023-4214
2023-11-18 02:15:49
nvd
nvd
CVE-2023-4214
2023-11-18 02:15:49
wpvulndb
wpvulndb
AppPresser < 4.3.0 - Insecure Password Reset Mechanism
2023-11-23 00:00:00
cvelist
cvelist
CVE-2023-4214
2023-11-18 01:54:34
wordfence
wordfence