Threat Entry Updated 2025-09-22

CVE-2025-5305 - Password Reset With Code For Wordpress Rest Api Plugin

The Password Reset with Code for WordPress REST API WordPress plugin before 0.0.17 does not use cryptographically sound algorithms to generate OTP codes, potentially leading to account takeovers.

PLUGIN Password Reset With Code For Wordpress Rest Api

CVE-2025-5305

CRITICAL CVSS 9.8 2025-09-18

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2024-11-21

CVE-2023-35039 - Password Reset With Code For Wordpress Rest Api Plugin

Improper Restriction of Excessive Authentication Attempts vulnerability in Be Devious Web Development Password Reset with Code for WordPress REST API allows Authentication Abuse.This issue affects Password Reset with Code for WordPress REST API: from n/a through 0.0.15.

PLUGIN Password Reset With Code For Wordpress Rest Api

CVE-2023-35039

CRITICAL CVSS 9.8 2023-12-07

Risk Score

Open Full Technical Breakdown