CyberRota
← Ana sayfaya dön

CVE-2026-14309

UNKNOWN · CVSS N/A

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-08-01T07:16:30.207 · Çekilme zamanı: 2026-08-01T12:06:05.033351+00:00

CyberRota Yorumu

Detaylı analiz gerekiyor.

CVE
CVE-2026-14309
Severity
UNKNOWN
CVSS
N/A
EPSS
Yok
WordPress

Orijinal NVD Açıklaması

The Chat On Desk Order Notifications WordPress plugin before 1.0.9 does not verify that the one-time password has been validated before processing a password-reset request, allowing unauthenticated attackers to reset the password of arbitrary users, including administrators, and take over their accounts when SMS one-time-password password reset is enabled.