Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

1 record

Vendor: Bedevious Clear all filters
TI-2023-17515 CVE-2023-35039 · GHSA-566f-j62v-7p4f

WordPress Password Reset with Code for WordPress REST API Plugin <= 0.0.15 is vulnerable to Broken Authentication

Priority MEDIUM 44

Improper Restriction of Excessive Authentication Attempts vulnerability in Be Devious Web Development Password Reset with Code for WordPress REST API allows Authentication Abuse.This issue affects Password Reset with Cod…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01058 Published 2023-12-07 No fix listed CWE-307