CVE-2023-35039
Critical
Description
Improper Restriction of Excessive Authentication Attempts vulnerability in Be Devious Web Development Password Reset with Code for WordPress REST API allows Authentication Abuse.This issue affects Password Reset with Code for WordPress REST API: from n/a through 0.0.15.
SeverityCritical
CVSS9.8
Exploit probability—
ProductBedevious Password Reset With Code For Wordpress Rest Api
PublishedDec 7, 2023
First seenDec 7, 2023
Weakness typeCWE-307CWE-307
How to fix
Update
- bedevious password_reset_with_code_for_wordpress_rest_api0.0.16 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bedevious password_reset_with_code_for_wordpress_rest_api | v < 0.0.16 | 0.0.16 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.