Condition extended when to set user activation key to empty to correctly invalidate password reset token. This vulnerability affects the following application versions: WordPress 3.6 WordPress 3.6.1 WordPress 3.7 WordPress 3.7.1 WordPress 3.7.2 WordPress 3.7.3 WordPress 3.7.4 WordPress 3.7.5 WordPress 3.7.6 WordPress 3.7.7 WordPress 3.7.8... Weiterlesen: Password reset tokens were not properly invalidated
Intelligence View
⚡ tsecurity.de Intelligence
Password reset tokens were not properly invalidated
Condition extended when to set user activation key to empty to correctly invalidate password reset token. This vulnerability affects the following application…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — free The top security news daily · unsubscribe anytime
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
No reader ratings yet
Was this page helpful?
0
Powered by tsecurity.de
tsecurity.de Hub
Related story clusters & sources (vector AI)
15 sources
CVE-2026-97559 | Linux Kernel up to 6.18.52/7.2.6/7.3-rc2 SMB Client DACL replace_sids_and_copy_aces/set_chmod_dacl integer overflow (WID-SEC-2026-3579)
14 more sources
VVulDB Updates4 hours agoCVE-2026-97561 | Linux Kernel up to 7.2.6/7.3-rc2 SMB Client privileges management (WID-SEC-2026-3579) VVulDB Updates4 hours agoCVE-2026-97560 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 SMB Client smb2_parse_native_symlink out-of-bounds (WID-SEC-2026-3579) VVulDB Updates4 hours agoCVE-2026-97563 | Linux Kernel up to 7.2.6/7.3-rc2 SMB Client CIFSSMBRead DataOffset/DataLength out-of-bounds (WID-SEC-2026-3579) VVulDB Updates4 hours agoCVE-2026-97562 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 SMB Client tcon_super_cb use after free (WID-SEC-2026-3579) VVulDB Updates4 hours agoCVE-2026-97564 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 cifs.idmap privileges management (WID-SEC-2026-3579) VVulDB Updates4 hours agoCVE-2026-97565 | Linux Kernel up to 6.18.52/7.2.6/7.3-rc2 SMB Client CIFSSMBRead out-of-bounds (WID-SEC-2026-3579)
+8
11 sources
CVE-2025-48311 | OffClicks Invisible Optin Plugin up to 1.0 on WordPress cross-site request forgery
10 more sources
VVulDB Updates3 hours agoCVE-2025-48321 | Ultimate Twitter Profile Widget Plugin up to 1.0 on WordPress cross-site request forgery VVulDB Updates3 hours agoCVE-2025-48318 | 多说社会化评论框 Plugin up to 1.2 on WordPress Setting cross-site request forgery VVulDB Updates3 hours agoCVE-2025-48309 | web-able BetPress Plugin up to 1.0.1 Lite on WordPress cross-site request forgery VVulDB Updates3 hours agoCVE-2025-48310 | wptableeditor Table Editor Plugin up to 1.6.4 on WordPress cross-site request forgery VVulDB Updates3 hours agoCVE-2025-48319 | Mesa Reservation Widget Plugin up to 1.0.0 on WordPress cross site scripting VVulDB Updates3 hours agoCVE-2025-48314 | salubrio Add Code To Head Plugin up to 1.17 on WordPress cross site scripting
+4
5 sources
3 Apple HomeView alternatives you can get today – and two are cheaper
4 more sources
ZZDNET4 hours ago3 Apple HomeView alternatives you can get today – and two are cheaper CCNET11 months agoApple’s Watch Ultra 3 Is Now $299 Cheaper on Amazon, but Stock Is Limited ZZDNET4 hours ago3 Apple HomeView alternatives you can get today – and two are cheaper ZZDNET4 hours ago3 Apple HomeView alternatives you can get today – and two are cheaper
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/en/4277466/secure-programming/password-reset-tokens-were-not-properly-invalidated/