Vulnerability Bulletins |
CVE-2025-5305 |
|
| Affected software | WORDPRESS |
| The Password Reset with Code for WordPress REST API WordPress plugin before 0.0.17 does not use cryptographically sound algorithms to generate OTP codes, potentially leading to account takeovers. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2025-5305 | |