Password Reset Vulnerability in ChamaWP WordPress Plugin
CVE-2026-16300
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2026-16300?
The ChamaWP WordPress plugin prior to version 1.0.13 is susceptible to a flaw that fails to adequately validate password reset requests. This vulnerability allows unauthorized attackers to reset passwords for any user, including those with administrative privileges. Such exploitation could lead to a complete compromise of the affected WordPress site, posing serious security risks. Site administrators are urged to update to the latest version to mitigate this threat.
Affected Version(s)
ChamaWP 0 < 1.0.13
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.