critical9.8
CVE-2020-28642
In InfiniteWP Admin Panel before 3.1.12.3, resetPasswordSendMail generates a weak password-reset code, which makes it easier for remote attackers to conduct ad…
Impact
In InfiniteWP Admin Panel before 3.1.12.3, resetPasswordSendMail generates a weak password-reset code, which makes it easier for remote attackers to conduct admin Account Takeover attacks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Infinitewp | Infinitewp | before 3.1.12.3 |