CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-7264

The Build App Online plugin for WordPress is vulnerable to account takeover due to a weak password reset mechanism in all versions up to, and including, 1.0.21. This makes it possible for unauthenticated attackers to reset the password of arbitrary users by guessing an 4-digit numeric reset code.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.009

EPSS Ranking 75.1%

CVSS Severity

CVSS v3 Score 8.1

References

Products affected by CVE-2023-7264

Buildapp » Build App Online » Version: 1.0.1

cpe:2.3:a:buildapp:build_app_online:1.0.1
Buildapp » Build App Online » Version: 1.0.10

cpe:2.3:a:buildapp:build_app_online:1.0.10
Buildapp » Build App Online » Version: 1.0.11

cpe:2.3:a:buildapp:build_app_online:1.0.11
Buildapp » Build App Online » Version: 1.0.12

cpe:2.3:a:buildapp:build_app_online:1.0.12
Buildapp » Build App Online » Version: 1.0.13

cpe:2.3:a:buildapp:build_app_online:1.0.13
Buildapp » Build App Online » Version: 1.0.14

cpe:2.3:a:buildapp:build_app_online:1.0.14
Buildapp » Build App Online » Version: 1.0.15

cpe:2.3:a:buildapp:build_app_online:1.0.15
Buildapp » Build App Online » Version: 1.0.16

cpe:2.3:a:buildapp:build_app_online:1.0.16
Buildapp » Build App Online » Version: 1.0.17

cpe:2.3:a:buildapp:build_app_online:1.0.17
Buildapp » Build App Online » Version: 1.0.18

cpe:2.3:a:buildapp:build_app_online:1.0.18
Buildapp » Build App Online » Version: 1.0.19

cpe:2.3:a:buildapp:build_app_online:1.0.19
Buildapp » Build App Online » Version: 1.0.2

cpe:2.3:a:buildapp:build_app_online:1.0.2
Buildapp » Build App Online » Version: 1.0.20

cpe:2.3:a:buildapp:build_app_online:1.0.20
Buildapp » Build App Online » Version: 1.0.21

cpe:2.3:a:buildapp:build_app_online:1.0.21
Buildapp » Build App Online » Version: 1.0.3

cpe:2.3:a:buildapp:build_app_online:1.0.3
Buildapp » Build App Online » Version: 1.0.4

cpe:2.3:a:buildapp:build_app_online:1.0.4
Buildapp » Build App Online » Version: 1.0.5

cpe:2.3:a:buildapp:build_app_online:1.0.5
Buildapp » Build App Online » Version: 1.0.6

cpe:2.3:a:buildapp:build_app_online:1.0.6
Buildapp » Build App Online » Version: 1.0.7

cpe:2.3:a:buildapp:build_app_online:1.0.7
Buildapp » Build App Online » Version: 1.0.8

cpe:2.3:a:buildapp:build_app_online:1.0.8
Buildapp » Build App Online » Version: 1.0.9

cpe:2.3:a:buildapp:build_app_online:1.0.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-7264

Products

Pricing

Contact Us