CVE-2020-36176
The iThemes Security (formerly Better WP Security) plugin before 7.7.0 for WordPress does not enforce a new-password requirement for an existing account until the second login o…
Published: 2021-01-06 · CVSS: Unscored
The iThemes Security (formerly Better WP Security) plugin before 7.7.0 for WordPress does not enforce a new-password requirement for an existing account until the second login occurs.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7