CVE-2022-2891

🗓️ 10 Oct 2022 00:00:00Reported by WPScanType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 78 Views

The WP 2FA plugin before 2.3.0 is vulnerable to time-based attacks

Reporter	Title	Published	Views	Family All 13
attackerkb	CVE-2022-2891	10 Oct 202221:15	–	attackerkb
BDU FSTEC	WP 2FA Plugin XSS	12 Oct 202200:00	–	bdu_fstec
CNNVD	WordPress plugin WP 2FA 信息泄露漏洞	10 Oct 202200:00	–	cnnvd
Cvelist	CVE-2022-2891 WP 2FA < 2.3.0 - Time-Based Side-Channel Attack	10 Oct 202200:00	–	cvelist
EUVD	EUVD-2022-35120	3 Oct 202520:07	–	euvd
NVD	CVE-2022-2891	10 Oct 202221:15	–	nvd
osv_cve	CVE-2022-2891	10 Oct 202221:15	–	osv_cve
Patchstack	WordPress WP 2FA plugin <= 2.2.1 - Time-Based Side-Channel Attack vulnerability	14 Sep 202200:00	–	patchstack
Prion	Authentication flaw	10 Oct 202221:15	–	prion
Positive Technologies	PT-2022-5018 · WordPress · Wp 2Fa	14 Sep 202200:00	–	ptsecurity

NVD

Vulners

Node

wpwhitesecurity wp_2faRange<2.3.0wordpress

[
  {
    "vendor": "Unknown",
    "product": "WP 2FA",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "0",
        "lessThan": "2.3.0"
      }
    ],
    "defaultStatus": "unaffected",
    "collectionURL": "https://wordpress.org/plugins"
  }
]