$ cve CVE-2025-47646 JSON

CVE-2025-47646

9.8

CRITICAL · CVSS 3.1 · EPSS 24.9% (pctl 98)

Patch early

EPSS 24.9% — above the 10% action threshold.

Description

Weak Password Recovery Mechanism for Forgotten Password vulnerability in Gilblas Ngunte Possi PSW Front-end Login & Registration psw-login-and-registration allows Password Recovery Exploitation.This issue affects PSW Front-end Login & Registration: from n/a through <= 1.13.

Scoring

CVSS	9.8 (CRITICAL, v3.1)
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS	24.94% — more likely to be exploited than 98% of all CVEs
Weakness	CWE-640
On CISA KEV	no
Public exploit	none known
Published	2025-05-23
Last modified	2026-06-17

References

https://patchstack.com/database/Wordpress/Plugin/psw-login-and-registration/vulnerability/wordpress-psw-front-end-login-registration-1-12-broken-authentication-vulnerability?_s_id=cve

→ the Explorer · watch your stack · NVD