CVE-2020-11027

mediumPriorität · beachten · 47EPSS 0.136 · 96. PerzentilExploit · PoCEURUUS

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

1 exploit · PoC

Likely / severe?

13.6% (96th) EPSS

CVSS 5.5 · medium

Is it mine?

79 products

Prüfe deine Angriffsfläche

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · osv

EPSS · bewertet 2026-10-27

In affected versions of WordPress, a password reset link emailed to a user does not expire upon changing the user password. Access would be needed to the email account of the user by a malicious party for successful execution. This has been patched in version 5.4.1, along with all the previously affected versions via a minor release (5.3.3, 5.2.6, 5.1.5, 5.0.9, 4.9.14, 4.8.13, 4.7.17, 4.6.18, 4.5.21, 4.4.22, 4.3.23, 4.2.27, 4.1.30, 4.0.30, 3.9.31, 3.8.33, 3.7.33).

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

8.1

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 5.5–8.1

v2.05.5mediumAV:N/AC:L/Au:S/C:P/I:P/A:Nprimary · NVD / NIST USAusnutzbarkeit 8 · Auswirkung 4.9

v3.18.1highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Nprimary · NVD / NIST USAusnutzbarkeit 2.8 · Auswirkung 5.2

v3.18.1highAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Nsecondary · FSTEC (BDU) RU

v3.16.1mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:Nsecondary · ENISA EU

v3.16.1mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:Nsecondary · security-advisories@github.comAusnutzbarkeit 1.6 · Auswirkung 4

v3.17.7highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:Psecondary · CVSS-BT (t0sche)

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-640USprimärCWE-640USCWE-672US

Exploits (1)

Öffentlicher Proof-of-Concept- und Exploit-Code.

EDB-51531WordPress Theme Medic v1.0.0 - Weak Password Recovery Mechanism for Forgotten PasswordPoC · exploit_db

betroffene Produkte (79)

Betroffene Produkte und Versionsbereiche.

WordPress WordPress3.7.0, → 3.7.33enisa_euvdEU
WordPress WordPress3.8.0, → 3.8.33enisa_euvdEU
WordPress WordPress3.9.0, → 3.9.31enisa_euvdEU
WordPress WordPress4.0.0, → 4.0.30enisa_euvdEU
WordPress WordPress4.1.0, → 4.1.30enisa_euvdEU
WordPress WordPress4.2.0, → 4.2.27enisa_euvdEU
WordPress WordPress4.3.0, → 4.3.23enisa_euvdEU
WordPress WordPress4.4.0, → 4.4.22enisa_euvdEU
WordPress WordPress4.5.0, → 4.5.21enisa_euvdEU
WordPress WordPress4.6.0, → 4.6.18enisa_euvdEU
WordPress WordPress4.7.0, → 4.7.17enisa_euvdEU
WordPress WordPress4.8.0, → 4.8.13enisa_euvdEU
WordPress WordPress4.9.0, → 4.9.14enisa_euvdEU
WordPress WordPress5.0.0, → 5.0.9enisa_euvdEU
WordPress WordPress5.1.0, → 5.1.5enisa_euvdEU
WordPress WordPress5.2.0, → 5.2.6enisa_euvdEU
WordPress WordPress5.3.0, → 5.3.3enisa_euvdEU
WordPress WordPress5.4.0, → 5.4.1enisa_euvdEU
WordPress Foundation WordPress≤ 5.4.1fstec_bduRU
Сообщество свободного программного обеспечения Debian GNU/Linux≤ 10fstec_bduRU

20 von 79 angezeigt

Advisories (2)

Hersteller- und Ökosystem-Meldungen dazu.

BIT-wordpress-2020-11027Password reset links invalidation issue in WordPress2024-03-06vendor · osvUS
In affected versions of WordPress, a password reset link emailed to a user does not expire upon changing the user password. Access would be needed to the email account of the user by a malicious party for successful execution. This has been patched in version 5.4.1, along with all the previously affected versions via a minor release (5.3.3, 5.2.6, 5.1.5, 5.0.9, 4.9.14, 4.8.13, 4.7.17, 4.6.18, 4.5.21, 4.4.22, 4.3.23, 4.2.27, 4.1.30, 4.0.30, 3.9.31, 3.8.33, 3.7.33).
BIT-wordpress-multisite-2020-11027Password reset links invalidation issue in WordPress2024-03-06vendor · osvUS
In affected versions of WordPress, a password reset link emailed to a user does not expire upon changing the user password. Access would be needed to the email account of the user by a malicious party for successful execution. This has been patched in version 5.4.1, along with all the previously affected versions via a minor release (5.3.3, 5.2.6, 5.1.5, 5.0.9, 4.9.14, 4.8.13, 4.7.17, 4.6.18, 4.5.21, 4.4.22, 4.3.23, 4.2.27, 4.1.30, 4.0.30, 3.9.31, 3.8.33, 3.7.33).

auch bekannt als (6)

Weitere Namen und Kennungen dieser Entität.

CNNVD-202004-2475 cnnvd
EUVD-2020-3412 enisa_euvd
BDU:2020-03937 fstec_bdu
BIT-wordpress-2020-11027osv
BIT-wordpress-multisite-2020-11027osv
GHSA-ww7v-jg8c-q6jw osv

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu osv NVD CVE.org MITRE

veröffentlicht 2020-04-30geändert 2026-06-17

verwandt (366)

Verwandte Einträge.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2023-7028US	critical9.8OT kritisch	94.5% (100th)	KEV	2024-01-12
An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5, 16.5 prior to 16.5.…
CVE-2021-32648US	critical9.1OT kritisch	90.4% (100th)	KEV	2021-08-26
octobercms in a CMS platform based on the Laravel PHP Framework. In affected versions of the october/system package an attacker can request an account password reset and then gain…
CVE-2019-18818US	critical9.8	97.6% (100th)	Exploit	2019-11-07
strapi before 3.0.0-beta.17.5 mishandles password resets within packages/strapi-admin/controllers/Auth.js and packages/strapi-plugin-users-permissions/controllers/Auth.js.
CVE-2017-7615US	high8.8	91.2% (100th)	Exploit	2017-04-16
MantisBT through 2.3.0 allows arbitrary password reset and unauthenticated admin access via an empty confirm_hash value to verify.php.
CVE-2019-19844US	critical9.8	53.6% (99th)	Exploit	2019-12-18
Django before 1.11.27, 2.x before 2.2.9, and 3.x before 3.0.1 allows account takeover. A suitably crafted email address (that is equal to an existing user's email address after cas…

+361 weitere

Referenzen (22)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan