exploitDog

CVE-2023-35039

Опубликовано: 07 дек. 2023

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

Improper Restriction of Excessive Authentication Attempts vulnerability in Be Devious Web Development Password Reset with Code for WordPress REST API allows Authentication Abuse.This issue affects Password Reset with Code for WordPress REST API: from n/a through 0.0.15.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:bedevious:password_reset_with_code_for_wordpress_rest_api:*:*:*:*:*:wordpress:*:*

Версия до 0.0.16 (исключая)

EPSS

Процентиль: 71%

0.00681

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-307

Связанные уязвимости

GHSA-566f-j62v-7p4f

CVSS3: 9.8

github

около 2 лет назад

Improper Restriction of Excessive Authentication Attempts vulnerability in Be Devious Web Development Password Reset with Code for WordPress REST API allows Authentication Abuse.This issue affects Password Reset with Code for WordPress REST API: from n/a through 0.0.15.

EPSS

Процентиль: 71%

0.00681

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-307