| Package | Affected versions | Patched versions |
|---|---|---|
| build app online | ≤ 1.0.21 |
The Build App Online plugin for WordPress is vulnerable to account takeover due to a weak password reset mechanism in all versions up to, and including, 1.0.22. This makes it possible for unauthenticated attackers to reset the password of arbitrary users by guessing an 4-digit numeric reset code.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free