CVE-2025-5305 - Vulnerability Details - OpenCVE

The Password Reset with Code for WordPress REST API WordPress plugin before 0.0.17 does not use cryptographically sound algorithms to generate OTP codes, potentially leading to account takeovers.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation poc

Automatable yes

Technical Impact total

Vendors	Products
Wordpress	Wordpress

No data.

No data.

References

Link	Providers
https://wpscan.com/vulnerability/dcf5c003-91b0-4e7d-89f3-7459d8f01153/

History

Mon, 22 Sep 2025 18:15:00 +0000

Type	Values Removed	Values Added
Metrics		cvssV3_1 `{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}` ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Thu, 18 Sep 2025 12:45:00 +0000

Type	Values Removed	Values Added
First Time appeared		Wordpress Wordpress wordpress
Vendors & Products		Wordpress Wordpress wordpress

Thu, 18 Sep 2025 06:15:00 +0000

Type	Values Removed	Values Added
Description		The Password Reset with Code for WordPress REST API WordPress plugin before 0.0.17 does not use cryptographically sound algorithms to generate OTP codes, potentially leading to account takeovers.
Title		Password Reset with Code < 0.0.17 - Insecure Password Reset Code Creation
References		https://wpscan.com/vulnerability/dcf5c003-91b0-4e7d-89f3-7459d8f01153/

MITRE

Status: PUBLISHED

Assigner: WPScan

Published: 2025-09-18T06:00:04.273Z

Updated: 2025-09-22T17:27:38.830Z

Reserved: 2025-05-28T13:47:13.132Z

Link: CVE-2025-5305

Vulnrichment

Updated: 2025-09-22T16:58:40.307Z

NVD

Status : Awaiting Analysis

Published: 2025-09-18T06:15:34.887

Modified: 2025-09-22T18:15:47.090

Link: CVE-2025-5305

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-5305", "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "state": "PUBLISHED", "assignerShortName": "WPScan", "dateReserved": "2025-05-28T13:47:13.132Z", "datePublished": "2025-09-18T06:00:04.273Z", "dateUpdated": "2025-09-22T17:27:38.830Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "shortName": "WPScan", "dateUpdated": "2025-09-18T06:00:04.273Z"}, "title": "Password Reset with Code < 0.0.17 - Insecure Password Reset Code Creation", "problemTypes": [{"descriptions": [{"description": "CWE-326 Inadequate Encryption Strength", "lang": "en", "type": "CWE"}]}], "affected": [{"vendor": "Unknown", "product": "Password Reset with Code for WordPress REST API", "versions": [{"status": "affected", "versionType": "semver", "version": "0", "lessThan": "0.0.17"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The Password Reset with Code for WordPress REST API WordPress plugin before 0.0.17 does not use cryptographically sound algorithms to generate OTP codes, potentially leading to account takeovers."}], "references": [{"url": "https://wpscan.com/vulnerability/dcf5c003-91b0-4e7d-89f3-7459d8f01153/", "tags": ["exploit", "vdb-entry", "technical-description"]}], "credits": [{"lang": "en", "value": "Tommaso Gregori (p1s1o)", "type": "finder"}, {"lang": "en", "value": "WPScan", "type": "coordinator"}], "source": {"discovery": "EXTERNAL"}, "x_generator": {"engine": "WPScan CVE Generator"}}, "adp": [{"references": [{"url": "https://wpscan.com/vulnerability/dcf5c003-91b0-4e7d-89f3-7459d8f01153/", "tags": ["exploit"]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2025-09-22T16:58:36.137976Z", "id": "CVE-2025-5305", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-09-22T17:27:38.830Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2025-5305", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-09-22T16:58:36.137976Z"}}}], "references": [{"url": "https://wpscan.com/vulnerability/dcf5c003-91b0-4e7d-89f3-7459d8f01153/", "tags": ["exploit"]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-09-22T16:58:40.307Z"}}], "cna": {"title": "Password Reset with Code < 0.0.17 - Insecure Password Reset Code Creation", "source": {"discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "finder", "value": "Tommaso Gregori (p1s1o)"}, {"lang": "en", "type": "coordinator", "value": "WPScan"}], "affected": [{"vendor": "Unknown", "product": "Password Reset with Code for WordPress REST API", "versions": [{"status": "affected", "version": "0", "lessThan": "0.0.17", "versionType": "semver"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://wpscan.com/vulnerability/dcf5c003-91b0-4e7d-89f3-7459d8f01153/", "tags": ["exploit", "vdb-entry", "technical-description"]}], "x_generator": {"engine": "WPScan CVE Generator"}, "descriptions": [{"lang": "en", "value": "The Password Reset with Code for WordPress REST API WordPress plugin before 0.0.17 does not use cryptographically sound algorithms to generate OTP codes, potentially leading to account takeovers."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "description": "CWE-326 Inadequate Encryption Strength"}]}], "providerMetadata": {"orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "shortName": "WPScan", "dateUpdated": "2025-09-18T06:00:04.273Z"}}}, "cveMetadata": {"cveId": "CVE-2025-5305", "state": "PUBLISHED", "dateUpdated": "2025-09-22T17:27:38.830Z", "dateReserved": "2025-05-28T13:47:13.132Z", "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "datePublished": "2025-09-18T06:00:04.273Z", "assignerShortName": "WPScan"}, "dataVersion": "5.1"}