CVE-2026-16300 in ChamaWP Plugininfo

Zusammenfassung

von MITRE • 03.08.2026

The ChamaWP WordPress plugin before 1.0.13 does not properly validate a password reset request, allowing unauthenticated attackers to reset the password of arbitrary users, including administrators, which could lead to a full site takeover.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Zuständig

WPScan

Reservieren

20.07.2026

Veröffentlichung

03.08.2026

Moderieren

akzeptiert

Eintrag

VDB-385512

CPE

bereit

CWE

CWE-862 (bestätigt)

CVSS

7.3 (VulDB)

EPSS

0.00000

KEV

nein

Aktivitäten

low

Sektor

Hostingprovider

Quellen

MITRE	https://www.cve.org/CVERecord?id=CVE-2026-16300
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-16300
CVE Details	https://www.cvedetails.com/cve/CVE-2026-16300/

◂ Zurück Übersicht Weiter ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!