CVE-2023-4214

—

CVSS 3.1

9.8 critical

EPSS

<1%p58

Published

Nov 18, 2023 (Nov 18, 2023)

Modified

Jun 17, 2026

Description

The AppPresser plugin for WordPress is vulnerable to unauthorized password resets in versions up to, and including 4.2.5. This is due to the plugin generating too weak a reset code, and the code used to reset the password has no attempt or time limit.

Vendors: apppresser
Products: apppresser
Ecosystems: WordPress
Weakness: CWE-620, CWE-640
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.