| Package | Affected versions | Patched versions |
|---|---|---|
| apppresser | < 4.3.0 | 4.3.0 |
The AppPresser plugin for WordPress is vulnerable to unauthorized password resets in versions up to, and including 4.2.5. This is due to the plugin generating too weak a reset code, and the code used to reset the password has no attempt or time limit.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free