CVE-2025-47646

Severity

CRITICAL

CVSS

9.8

EPSS

0.24308

Risk score

47.71

CISA KEV

PoC

Published

2025-05-23

Modified

2026-04-29

First seen

2026-08-07

Aliases

EUVD-2025-28110, GHSA-G83R-7CWR-H2JW

Products

empoweringprowebsite:PSW Front-end Login & Registration 0 ≤1.13

Sources

euvd EUVD-2025-28110

Description

Weak Password Recovery Mechanism for Forgotten Password vulnerability in Gilblas Ngunte Possi PSW Front-end Login & Registration psw-login-and-registration allows Password Recovery Exploitation.This issue affects PSW Front-end Login & Registration: from n/a through <= 1.13.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-28110
https://patchstack.com/database/Wordpress/Plugin/psw-login-and-registration/vulnerability/wordpress-psw-front-end-login-registration-1-12-broken-authentication-vulnerability?_s_id=cve