Files
CVEs-PoC/2014/CVE-2014-9039.md
T
2025-09-29 21:09:30 +02:00

696 B

CVE-2014-9039

Description

wp-login.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 might allow remote attackers to reset passwords by leveraging access to an e-mail account that received a password-reset message.

POC

Reference

No PoCs from references.

Github