Skip to content
OpenAdvisories

Vendor

empoweringprowebsite

1 known vulnerabilities.

Products

PSW Front-end Login & Registration 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2025-4607

    PSW Front-end Login & Registration <= 1.12 - Insufficiently Random Values to Unauthenticated Account Takeover/Privilege Escalation via customer_registration Function

    The PSW Front-end Login & Registration plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.12 via the customer_registration() function. This is due to the use of a weak, low-entropy OTP mechanism in the forget() …

    empoweringprowebsite PSW Front-end Login & Registration Web / CMS