by Kastro
Paper/Archive/CVE-2026-113616

CVE-2026-113616

Unknown LogixFast Auth — LogixFast Auth < 1.0.4 - Unauthenticated Account Takeover via Password Reset

EPSS 0.1%CVSS 9.8
critical.is priorityof 100
30
CVSS 9.8 (ADP)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 3.9.039 × 200.8No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

The LogixFast Auth WordPress plugin before 1.0.4 does not deliver its password-reset one-time code to the resolved account's own email address, mailing it to the address supplied in the request instead, allowing unauthenticated attackers to reset any user's password, including an administrator's, and take over the account.

Affected

ProductAffectedFixed inSource
LogixFast Auth< 1.0.41.0.4CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

exploitwpscan.com/vulnerability/ea433cee-716a-4c41-b586-193ed864a1be