cbcvebase.

Empoweringprowebsite Psw Front-End Login Registration vulnerabilities

1 known vulnerability affecting empoweringprowebsite/psw_front-end_login_registration.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2025-4607P2CRITICALCVSS 9.8≤ 1.122025-05-31
CVE-2025-4607 [CRITICAL] CWE-330 CVE-2025-4607: The PSW Front-end Login & Registration plugin for WordPress is vulnerable to Privilege Escalation in The PSW Front-end Login & Registration plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.12 via the customer_registration() function. This is due to the use of a weak, low-entropy OTP mechanism in the forget() function. This makes it possible for unauthenticated attackers to initiate a password reset
nvd
Empoweringprowebsite Psw Front-End Login Registration vulnerabilities | cvebase