In Textpattern 4.5.7, the password-reset feature does not securely tether a hash to a user account.

Published Aug 14, 2020 · Updated Aug 6, 2024 · Assigned by mitre