Emails Catch All, CVE-2025-60041

CVE, Research URL: CVE-2025-60041
Home page URL: Security reports for Emails Catch All
Application: Emails Catch All
Published on: Oct 22, 2025
Research Description: Authentication Bypass Using an Alternate Path or Channel vulnerability in Iulia Cazan Emails Catch All emails-catch-all allows Password Recovery Exploitation.This issue affects Emails Catch All: from n/a through <= 3.5.3.
Affected versions: max 3.5.4.
Status: vulnerable