| Package | Affected versions | Patched versions |
|---|---|---|
| wowonder | = 3.0.4 |
In WoWonder 3.0.4, remote attackers can take over any account due to the weak cryptographic algorithm in recover.php. The code parameter is easily predicted from the time of day.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free