Description
In InfiniteWP Admin Panel before 3.1.12.3, resetPasswordSendMail generates a weak password-reset code, which makes it easier for remote attackers to conduct admin Account Takeover attacks.
Unscored
CVE-2020-28642
EUVD-2020-21040GHSA-9qfg-3vc9-gp3w
In InfiniteWP Admin Panel before 3.1.12.3, resetPasswordSendMail generates a weak password-reset code, which makes it easier for remote att…
Published Nov 16, 2020 · Updated Aug 4, 2024 · Assigned by mitre