Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
patchstackMaycon VitaliPATCHSTACK:BC218A321A8FFA7313B2669576E69746
HistoryApr 29, 2022 - 12:00 a.m.

WordPress WP 2FA plugin <= 2.1.0 - Arbitrary 2FA Disabling via Insecure Direct Object References (IDOR) vulnerability

2022-04-2900:00:00
Maycon Vitali
patchstack.com
5
wordpress
2fa
plugin
vulnerability
idor
maycon vitali
update
JSON

Arbitrary 2FA Disabling via Insecure Direct Object References (IDOR) vulnerability discovered by Maycon Vitali in WordPress WP 2FA plugin (versions <= 2.1.0).

Solution

           Update the WordPress WP 2FA plugin to the latest available version (at least 2.2.0).
JSON