AppPresser < 4.4.7 - Unauthenticated Privilege Escalation via Password Reset

Description

The plugin is vulnerable to privilege escalation via account takeover due to the plugin not properly validating a user's password reset code prior to updating their password. This makes it possible for unauthenticated attackers, with knowledge of a user's email address, to reset the user's password and gain access to their account.