CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
The AppPresser plugin for WordPress is vulnerable to unauthorized password resets in versions up to, and including 4.2.5. This is due to the plugin generating too weak a reset code, and the code used to reset the password has no attempt or time limit.
Explanation of Vulnerability in Simple Terms
AppPresser versions up to 4.2.5 contain a vulnerability that allows an attacker to read sensitive data, modify site content, or disrupt service availability. The vulnerability requires specific technical conditions to exploit but does not require authentication or user interaction. Site administrators should update to a version newer than 4.2.5 immediately.
What an attacker can do
Read sensitive data, modify site content, or cause the site to become unavailable.
Potential impact on your site
Confidential data exposure, unauthorized content changes, or service disruption without warning.
Conditions required to exploit
Network access; specific technical conditions must be met (high attack complexity).
Key dates
External resources
Related vulnerabilities
