CVE-2025-57942: Andy Moyle Emergency Password Reset

Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days.

Cross-Site Request Forgery (CSRF) vulnerability in andy_moyle Emergency Password Reset emergency-password-reset allows Cross Site Request Forgery.This issue affects Emergency Password Reset: from n/a through <= 9.3.

Affected products

• Andy Moyle Emergency Password Reset: up to and including 9.3

Published 2025-09-22. Last modified 2026-09-30.