CVE-2025-67168
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
RiteCMS v3.1.0 was discovered to use insecure encryption to store passwords.
Risk Assessment
Weak password encryption may allow an attacker to recover user passwords, potentially leading to account takeover and data breach.
Recommendation
Update RiteCMS to the latest version and enforce the use of secure password hashing algorithms (e.g., bcrypt, Argon2).
Other vulnerabilities in RiteCMS
See all- CVE-2025-67171High
Incorrect access control in the /templates/ component of RiteCMS v3.1.0 allows attackers to access sensitive files via directory traversal. The vulnerability enables reading files outside the intended directory.
- CVE-2025-67172High
RiteCMS v3.1.0 has an authenticated remote code execution (RCE) vulnerability via the parse_special_tags() function.
Original NVD description (English source)
RiteCMS v3.1.0 was discovered to use insecure encryption to store passwords.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS