Skip to content
OpenAdvisories

Weakness (CWE)

CWE-620: Unverified Password Change

Base Draft

When setting a new password for a user, the product does not require knowledge of the original password, or using another form of authentication.

How to prevent it (2 mitigations)

  1. Architecture and Design

    When prompting for a password change, force the user to provide the original password in addition to the new password.

  2. Architecture and Design

    Do not use "forgotten password" functionality. But if you must, ensure that you are only providing information to the actual user, e.g. by using an email address or challenge question that the legitimate user already provided in the past; do not allow the current user to change this identity information until the correct password has been provided.

Source: MITRE CWE-620

All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-15964 Public exploit

    Single Sign On For TNG <= 2.0.0 - Unauthenticated Privilege Escalation via Unverified Password Change

    The Single Sign On For TNG plugin for WordPress is vulnerable to Authentication Bypass via unauthenticated password reset in all versions up to, and including, 2.0.0. This is due to the `ssoprocess_ajax()` function — registered on `wp_ajax_nopriv_ssoprocess_a…

    britcoder Single Sign On For TNG Web / CMS
  • Critical 9.8
    CVE-2025-9286 Public exploit

    Appy Pie Connect for WooCommerce <= 1.1.2 - Missing Authorization to Unauthenticated Privilege Escalation via reset_user_password

    The Appy Pie Connect for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization within the reset_user_password() REST handler in all versions up to, and including, 1.1.2. This makes it possible for unauthenticated …

    hancock11 Appy Pie Connect for WooCommerce Web / CMS
  • Critical 9.8
    CVE-2025-4606 Public exploit

    Sala - Startup & SaaS WordPress Theme <= 1.1.4 - Unauthenticated Privilege Escalation via Password Reset/Account Takeover

    The Sala - Startup & SaaS WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.1.4. This is due to the theme not properly validating a user's identity prior to updating their de…

    uxper Sala - Startup & SaaS WordPress Theme Web / CMS
  • Critical 9.8
    CVE-2025-4322 Public exploit EPSS 15%

    Motors <= 5.6.67 - Unauthenticated Privilege Escalation via Password Update/Account Takeover

    The Motors theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.6.67. This is due to the theme not properly validating a user's identity prior to updating their password. This makes it possible…

    StylemixThemes Motors - Car Dealer, Rental & Listing WordPress theme Web / CMS
  • Critical 9.3
    CVE-2024-48887 Public exploit EPSS 16%

    A unverified password change vulnerability in Fortinet FortiSwitch GUI may allow a remote unauthenticated attacker to c…

    Fortinet FortiSwitch Network devices
  • Critical 10.0
    CVE-2024-20419 Public exploit EPSS 81%

    A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unaut…

    Cisco Cisco Smart Software Manager On-Prem Network devices
  • Critical 9.1
    CVE-2020-7378 Public exploit

    CRIXP OpenCRX Unverified Password Change

    CRIXP OpenCRX version 4.30 and 5.0-20200717 and prior suffers from an unverified password change vulnerability. An attacker who is able to connect to the affected OpenCRX instance can change the password of any user, including admin-Standard, to any chosen va…

    CRIXP OpenCRX