CVE-2023-35039

CRITIQUE 9.8CVE-2023-35039 · Published 07/12/2023 · updated 17/06/2026

En bref

CVE-2023-35039 est une vulnérabilité CRITIQUE (CVSS 9.8) touchant password reset with code for wordpress rest api (bedevious).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 1.1%, plus élevée que 64.7% des vulnérabilités.
Correctif : mettre à jour vers 0.0.16 ou plus récent.

Package	Affected versions	Patched versions
password reset with code for wordpress rest api bedevious	`< 0.0.16`	`0.0.16`

Description

Improper Restriction of Excessive Authentication Attempts vulnerability in Be Devious Web Development Password Reset with Code for WordPress REST API allows Authentication Abuse.This issue affects Password Reset with Code for WordPress REST API: from n/a through 0.0.15.

References

patchstack.com/database/vulnerability/bdvs-password-reset/wordpress-password-reset-with-code-for-wordpress-rest-api-plugin-0-0-15-privilege-escalation-due-to-weak-pin-generation-vulnerability · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free