WordPress Plugin Vulnerabilities

AppPresser < 4.3.0 - Insecure Password Reset Mechanism

Description

The AppPresser plugin for WordPress is vulnerable to unauthorized password resets in versions up to, and including 4.2.5. This is due to the plugin generating too weak a reset code, and the code used to reset the password has no attempt or time limit.

Affects Plugins

Plugin icon
apppresser
Fixed in 4.3.0

References

CVE
CVE-2023-4214
URL
https://www.wordfence.com/threat-intel/vulnerabilities/id/4c44c36a-c4c7-49c2-b750-1589e7840dde

Miscellaneous

Original Researcher
István Márton
Verified
No
WPVDB ID
bdda38ef-0f57-4585-8389-93a236bcede4

Timeline

Publicly Published
2023-11-16 (about 2 years ago)
Added
2023-11-23 (about 2 years ago)
Last Updated
2023-11-24 (about 2 years ago)

Other

Published
Title
Published
2023-03-02
Title
Metform Elementor Contact Form Builder < 3.2.2 - reCaptcha Bypass
Published
2018-10-02
Title
Wordfence < 7.1.14 - Username Enumeration Prevention Bypass
Published
2015-03-08
Title
Download Monitor < 1.6.4 - Authenticated Directory Listing
Published
2014-09-17
Title
WP-Ban < 1.64 BlackList Bypass
Published
2022-08-29
Title
Site Offline < 1.5.3 - Access Bypass