Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

Published: 09/01/2025 Updated: 09/01/2025

Unauthorized Password Reset Vulnerability in WPBookit WordPress Plugin

The WPBookit plugin for WordPress has a vulnerability in versions up to 1.6.4. This is an Arbitrary User Password Change issue. The plugin lets users access objects and bypass authorization. Unauthenticated attackers can change user passwords. They can even take over administrator accounts.

Vulnerable Product	Search on Vulmon	Subscribe to Product
iqonic design wpbookit

CWE-639 https://nvd.nist.gov https://www.first.org/epss https://documentation.iqonic.design/wpbookit/versions/change-log https://www.wordfence.com/threat-intel/vulnerabilities/id/2d23a2b9-8476-4564-a5de-5e6cfc38ce68?source=cve

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2024-10215

Vulnerability Summary

References

Vulmon Search

About

Products

Connect