Condition extended when to set user activation key to empty to correctly invalidate password reset token. This vulnerability affects the following application versions: WordPress 3.6 WordPress 3.6.1 WordPress 3.7 WordPress 3.7.1 WordPress 3.7.2 WordPress 3.7.3 WordPress 3.7.4 WordPress 3.7.5 WordPress 3.7.6 WordPress 3.7.7 WordPress 3.7.8... Weiterlesen: Password reset tokens were not properly invalidated
Intelligence View
⚡ tsecurity.de Intelligence
Password reset tokens were not properly invalidated
Condition extended when to set user activation key to empty to correctly invalidate password reset token. This vulnerability affects the following application…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
12 Quellen
CVE-2026-98881 | Linux Kernel up to 6.18.52 Bridge Multicast br_multicast.c br_multicast_dev_del infinite loop (EUVD-2026-108675)
11 weitere Quellen
VVulDB Updatesvor 1 Std.CVE-2026-98882 | Linux Kernel up to 6.12.110/6.18.52 wave5 wave5-vpuapi.c wave5_vpu_dec_get_output_info frame_buf buffer overflow (EUVD-2026-108676) VVulDB Updatesvor 1 Std.CVE-2026-98880 | Linux Kernel up to 6.6.157/6.12.110/6.18.52 ntfs3 set_blocksize buffer overflow (EUVD-2026-108674) VVulDB Updatesvor 1 Std.CVE-2026-98879 | Linux Kernel up to 6.18.52 isofs set_blocksize buffer overflow (EUVD-2026-108673) VVulDB Updatesvor 1 Std.CVE-2026-98878 | Linux Kernel up to 6.18.52 irqchip-gic-v5 irq_eoi denial of service (EUVD-2026-108672) VVulDB Updatesvor 1 Std.CVE-2026-98877 | Linux Kernel up to 6.18.52 irqchip-gic-v4 __irq_domain_instantiate null pointer dereference (EUVD-2026-108723) VVulDB Updatesvor 1 Std.CVE-2026-98916 | Linux Kernel up to 6.6.159/6.12.113/6.18.52 nl80211 input validation (EUVD-2026-108872)
+5
8 Quellen
CVE-2025-30051 | CGM CLININET up to 2026.MS2 Configuration File SysIO.pl permission (EUVD-2025-211181)
7 weitere Quellen
VVulDB Updatesvor 4 Std.CVE-2025-30049 | CGM CLININET up to 2026.MS3 weak password hash (EUVD-2025-211179) VVulDB Updatesvor 4 Std.CVE-2025-30047 | CGM CLININET up to 2026.MS2 deserialization (EUVD-2025-211178) VVulDB Updatesvor 4 Std.CVE-2025-30050 | CGM CLININET up to 2026.MS2 RunCGI RunCGI.pm os command injection (EUVD-2025-211180) VVulDB Updatesvor 4 Std.CVE-2025-30045 | CGM CLININET up to 2026.MS3 ConvExpr code injection (EUVD-2025-211176) VVulDB Updatesvor 4 Std.CVE-2025-30046 | CGM CLININET up to 2026.MS3 HL7 Communication privileges management (EUVD-2025-211177) VVulDB Updatesvor 4 Std.CVE-2025-30043 | CGM CLININET up to 2026.MS2 missing authentication (EUVD-2025-211175)
+1
7 Quellen
CVE-2026-114645 | MongoDB C Driver up to 1.30.13/2.5.6 Kerberos Authentication out-of-bounds write (WID-SEC-2026-4134)
6 weitere Quellen
VVulDB Updatesvor 1 Std.CVE-2026-114643 | MongoDB C# Driver up to 3.12.x input validation (WID-SEC-2026-4126) VVulDB Updatesvor 1 Std.CVE-2026-114644 | MongoDB C# Driver up to 3.12.x Deserialization resource consumption (WID-SEC-2026-4126) VVulDB Updatesvor 1 Std.CVE-2026-114646 | MongoDB C# Driver up to 3.12.x BSON input validation (WID-SEC-2026-4126) VVulDB Updatesvor 1 Std.CVE-2026-114648 | MongoDB C# Driver up to 3.12.x LINQ Query Processing neutralization (WID-SEC-2026-4126) VVulDB Updatesvor 1 Std.CVE-2026-114647 | MongoDB C# Driver up to 3.12.x Document Replacement Validation FindOneAndReplace input validation (WID-SEC-2026-4126) VVulDB Updatesvor 1 Std.CVE-2026-114649 | MongoDB C# Driver up to 3.12.x TLS Client Certificate Comparison certificate validation (WID-SEC-2026-4126)
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4277466/sichere-programmierung/password-reset-tokens-were-not-properly-invalidated/