CVE-2026-16300
Received Received - Intake

Unauthenticated Password Reset in ChamaWP Plugin

Publication date: 2026-08-03

Last updated on: 2026-08-03

Assigner: WPScan

Description
The ChamaWP WordPress plugin before 1.0.13 does not properly validate a password reset request, allowing unauthenticated attackers to reset the password of arbitrary users, including administrators, which could lead to a full site takeover.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-03
Last Modified
2026-08-03
Generated
2026-08-03
AI Q&A
2026-08-03
EPSS Evaluated
N/A
NVD
CVE-2026-16300
EUVD
EUVD-2026-52181

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
chamawp chamawp to 1.0.13 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

The ChamaWP WordPress plugin before version 1.0.13 has a flaw in its password reset functionality. It fails to properly validate reset requests, allowing unauthenticated attackers to change passwords for any user account, including administrators. This could let attackers gain full control of the WordPress site.

Impact Analysis

If you use the ChamaWP plugin before 1.0.13, an attacker could take over your WordPress site by resetting admin passwords. This could lead to data theft, malware installation, or defacement of your website. All users of vulnerable versions are at risk.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR and HIPAA requirements for data protection. Organizations may face fines or penalties if user data is compromised due to this flaw.

Mitigation Strategies

Update the ChamaWP plugin to version 1.0.13 or later to address the improper password reset validation issue.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-16300. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart