EDB-41963
PoCWordPress Core < 4.7.4 - Unauthorized Password Reset
view exploit source exploit_dbtype webappsauthor Dawid Golunskipublished 2017-05-03catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2017-8295US | medium5.9 | Exploit | ||
WordPress through 4.7.4 relies on the Host HTTP header for a password-reset e-mail message, which makes it easier for remote attackers to reset arbitrary passwords by making a craf… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan