CVE-2023-38353: Minitool Power Data Recovery

Medium severity, CVSS 5.9. EPSS: 0.4% chance of exploitation in the next 30 days.

MiniTool Power Data Recovery version 11.6 and before contains an insecure in-app payment system that allows attackers to steal highly sensitive information through a man in the middle attack.

Affected products

• Minitool Power Data Recovery: up to and including 11.6

Published 2023-09-19. Last modified 2026-06-17.