Skip to content
OpenAdvisories
Medium · 4.3 CVE-2024-35648 EUVD-2024-55635GHSA-vwjh-9qr4-5f7p

WordPress Emergency Password Reset plugin <= 8.0 - Cross Site Request Forgery (CSRF) vulnerability

Published Jun 17, 2026 · Updated Jun 17, 2026 · Assigned by Patchstack

Vendor: andy_moyle Product: Emergency Password Reset

Description

Cross-Site request forgery (CSRF) vulnerability in Andy Moyle Emergency Password Reset allows Cross Site Request Forgery.

This issue affects Emergency Password Reset: from n/a through 8.0.

Affected products

VendorProductAffectedFixed
Andy Moyle Emergency Password Reset ≤ 8.0 —

References