Vulnerabilities > Posimyth > THE Plus Addons FOR Elementor > Medium

DATE CVE VULNERABILITY TITLE RISK
2021-06-14 CVE-2021-24359 Improper Authentication vulnerability in Posimyth the Plus Addons for Elementor
The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.11 did not properly check that a user requesting a password reset was the legitimate user, allowing an attacker to send an arbitrary reset password email to a registered user on behalf of the WordPress site.
network
low complexity
posimyth CWE-287
5.3