CVE-2025-60041 — WordPress Emails Catch All plugin <= 3.5.3 - Broken Authentication vulnerability

CVE-2025-60041

WordPress Emails Catch All plugin <= 3.5.3 - Broken Authentication vulnerability PUBLISHED

Description (CNA)

Authentication Bypass Using an Alternate Path or Channel vulnerability in Iulia Cazan Emails Catch All emails-catch-all allows Password Recovery Exploitation.This issue affects Emails Catch All: from n/a through <= 3.5.3.

Affected (CNA)

Vendor / product	Versions
Iulia Cazan / Emails Catch All	affected 0 through 3.5.3

CWE

CWE-288

References

https://patchstack.com/database/Wordpress/Plugin/emails-catch-all/vulnerability/wordpress-emails-catch-all-plugin-3-5-3-broken-authentication-vulnerability?_s_id=cve

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.