https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T22:27:31.796952+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-24655 CVE-2021-24655 — WP User Manager < 2.6.3 - Arbitrary User Password Reset to Account Compromise 2026-10-06T22:27:31.813238+00:00

Affected: Unknown WP User Manager – User Profile Builder & Membership

The WP User Manager WordPress plugin before 2.6.3 does not ensure that the user ID to reset the password of is related to the reset key given. As a result, any authenticated user can reset the password (to an arbitrary value) of any user knowing only their ID, and gain access to their account.