CVE-2022-2891

🗓️ 10 Oct 2022 00:00:00Reported by WPScanType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 47 Views

The WP 2FA plugin before 2.3.0 is vulnerable to time-based attacks

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2022-2891	10 Oct 202221:15	–	attackerkb
CNNVD	WordPress plugin WP 2FA 信息泄露漏洞	10 Oct 202200:00	–	cnnvd
Cvelist	CVE-2022-2891 WP 2FA < 2.3.0 - Time-Based Side-Channel Attack	10 Oct 202200:00	–	cvelist
EUVD	EUVD-2022-35120	3 Oct 202520:07	–	euvd
NVD	CVE-2022-2891	10 Oct 202221:15	–	nvd
Patchstack	WordPress WP 2FA plugin <= 2.2.1 - Time-Based Side-Channel Attack vulnerability	14 Sep 202200:00	–	patchstack
Prion	Authentication flaw	10 Oct 202221:15	–	prion
Positive Technologies	PT-2022-5018 · WordPress · Wp 2Fa	14 Sep 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-2891	22 May 202522:47	–	redhatcve
WPVulnDB	WP 2FA < 2.3.0 - Time-Based Side-Channel Attack	14 Sep 202200:00	–	wpvulndb

NVD

Vulners

Node

wpwhitesecurity wp_2faRange<2.3.0wordpress

[
  {
    "vendor": "Unknown",
    "product": "WP 2FA",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "0",
        "lessThan": "2.3.0"
      }
    ],
    "defaultStatus": "unaffected",
    "collectionURL": "https://wordpress.org/plugins"
  }
]