UserPro Plugin Vulnerability Allows Account Takeover

/in

Patchstack discovered the critical flaw in the plugin’s password reset mechanism, specifically within the userpro_process_form function, which allowed unauthenticated users to change the passwords of other users under certain conditions.

Cyware News – Latest Cyber News – ​Read More

Bolster Raises $14 Million for AI-Powered Phishing Protection55,000 Impacted by Cyberattack on California School Association