Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-x23h-whff-jxq7

Опубликовано: 15 окт. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

The WP 2FA with Telegram plugin for WordPress is vulnerable to Two-Factor Authentication Bypass in versions up to, and including, 3.0. This is due to the two-factor code being stored in a cookie, which makes it possible to bypass two-factor authentication.

The WP 2FA with Telegram plugin for WordPress is vulnerable to Two-Factor Authentication Bypass in versions up to, and including, 3.0. This is due to the two-factor code being stored in a cookie, which makes it possible to bypass two-factor authentication.

EPSS

Процентиль: 21%
0.00067
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-565
CWE-784

Связанные уязвимости

CVSS3: 6.5
nvd
больше 1 года назад

The WP 2FA with Telegram plugin for WordPress is vulnerable to Two-Factor Authentication Bypass in versions up to, and including, 3.0. This is due to the two-factor code being stored in a cookie, which makes it possible to bypass two-factor authentication.

EPSS

Процентиль: 21%
0.00067
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-565
CWE-784