Description
PrestaShop 1.7.2.4 allows user enumeration via the Reset Password feature, by noticing which reset attempts do not produce a "This account does not exist" error message.
Remediation
References
Related Vulnerabilities
WordPress Plugin WPS Hide Login Multiple Security Bypass Vulnerabilities (1.5.2.2)
WordPress Plugin wp superb Slideshow 'upload.php' Arbitrary File Upload (2.2)
WordPress Plugin Mang Board WP SQL Injection (1.9.9)
OpenSSL Out-of-bounds Write Vulnerability (CVE-2025-69419)
WordPress Plugin WP e-Commerce-Clockwork SMS Cross-Site Scripting (2.0.5)