CVE-2025-12866 — Hundred Plus｜EIP Plus - Weak Password Recovery Mechanism
EIP Plus developed by Hundred Plus has a Weak Password Recovery Mechanism vulnerability, allowing unauthenticated remote attacker to predict or brute-force the 'forgot password'…
Published: 2025-11-10 · CVSS: 9.3 · CVSS 4.0
EIP Plus developed by Hundred Plus has a Weak Password Recovery Mechanism vulnerability, allowing unauthenticated remote attacker to predict or brute-force the 'forgot password' link, thereby successfully resetting any user's password.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7