Password Recovery Project Password Recovery — known CVE vulnerabilities

Every CVE whose affected-product data names Password Recovery Project Password Recovery, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2023-3222 — CVSS 7.5 (high): Vulnerability in the password recovery mechanism of Password Recovery plugin for Roundcube, in its 1.2 version, which could allow a remote…
• CVE-2023-3221 — CVSS 5.3 (medium): User enumeration vulnerability in Password Recovery plugin 1.2 version for Roundcube, which could allow a remote attacker to create a test…