Aller au contenu
Se connecter
9.8 Critique

CVE-2026-16300 The ChamaWP WordPress plugin before 1.0.13 does not properly validate a password reset request, allowing…

Description

The ChamaWP WordPress plugin before 1.0.13 does not properly validate a password reset request, allowing unauthenticated attackers to reset the password of arbitrary users, including administrators, which could lead to a full site takeover.

Produits et versions touchés

Produit Versions touchées Corrigé en
ChamaWP 1.0 premières → < 1.0.13 1.0.13

Autres CVE de ChamaWP

Les 2 CVE de ChamaWP →
CVE-2025-15672 The ChamaWP WordPress plugin before 1.0.13 does not properly validate user input before passing it to a PHP… 8.1 Élevée
Suivre cette CVE