CVE-2009-2762
CVSS Score Not Available
74.13%
HIGH RiskEPSS (99th percentile)
wp-login.php in WordPress 2.8.3 and earlier allows remote attackers to force a password reset for the first user in the database, possibly the administrator, via a key[] array variable in a resetpass (aka rp) action, which bypasses a check that assumes that $key is not an array.
Published: 8/13/2009
Modified: 4/9/2025
Vulnerability Summary
EPSS Score (Exploitation Probability)
74.13%HIGH Exploitation Risk
99th percentile
This vulnerability has a 74.13% probability of being exploited in the next 30 days, ranking higher than 99% of all scored CVEs.