Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
CVE-2025-65831: WordPress uses insecure password hashing, putting users at risk of password cracking
CVE-2025-65831 · published 10 months ago
Summary
WordPress stores passwords using a weak algorithm that can be easily broken by an attacker with access to the hashed passwords. This could allow unauthorized access to user accounts. To protect your users, update to a more secure password hashing method.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| meatmeet | meatmeet |
1.1.2.0 cpe:2.3:a:meatmeet:meatmeet:1.1.2.0:*:*:*:pro:android:*:* |
Original advisory text
The application uses an insecure hashing algorithm (MD5) to hash passwords. If an attacker obtained a copy of these hashes, either through exploiting cloud services, performing TLS downgrade attack...
The application uses an insecure hashing algorithm (MD5) to hash passwords. If an attacker obtained a copy of these hashes, either through exploiting cloud services, performing TLS downgrade attacks on the traffic from a mobile device, or through another means, they may be able to crack the hash in a reasonable amount of time and gain unauthorized access to the victim's account.
References
- https://gist.github.com/dead1nfluence/4dffc239b4a460f41a03345fd8e5feb5#file-lack... Third Party Advisory
- https://github.com/dead1nfluence/Meatmeet-Pro-Vulnerabilities/blob/main/Mobile-A... Third Party Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker partial control
Type
CWE-327Use of a Broken Cryptographic Algorithm
Timeline
Published10 Dec 2025
Updated29 Oct 2026
First seen7 Mar 2026
Sources
CVE-2025-65831 · NVD
Track software like this
Free during beta