WordPress security by component
Password Reset with Code for WordPress REST API
Plugin description
Password Reset with Code for WordPress REST API is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Sep 18, 2025; the highest CVE/CNA score is 9.8.
Plugin slug:
password-reset-with-code-for-wordpress-rest-apiLatest vulnerability
CVE-2025-5305: Password Reset with Code for WordPress REST API: Privilege escalation or authentication bypass
Password Reset with Code for WordPress REST API is affected by privilege escalation or authentication bypass. Exposure depends on how the affected operation is made reachable by the site. A successful request can grant permissions or access that the caller should not possess.
| Safe version |
|
||
|---|---|---|---|
| Sep 18, 2025 |
CVE-2025-5305
Password Reset with Code for WordPress REST API: Privilege escalation or authentication bypass
Password Reset with Code for WordPress REST API is affected by privilege escalation or authentication bypass. Exposure depends on how the affected operation is made reachable by the site. A successful request can grant permissions or access that the caller should not possess.
|
See mitigation notes |
CVE9.8
NVDPending
|