WordPress UsersWP plugin < 1.2.67 - Two-Factor Authentication Bypass vulnerability

Two-Factor Authentication Bypass vulnerability discovered by dc11 in WordPress Plugin UsersWP versions 1.2.67...

CVE-2026-13690

The UsersWP WordPress plugin before 1.2.67 does not validate the selected authentication provider in its two-factor login handler, allowing an attacker who already knows a user's credentials to bypass the second authentication factor and log in as that user...

CVE-2026-13690 UsersWP < 1.2.67 - Two-Factor Authentication Bypass

The UsersWP WordPress plugin before 1.2.67 does not validate the selected authentication provider in its two-factor login handler, allowing an attacker who already knows a user's credentials to bypass the second authentication factor and log in as that user...

EUVD-2024-30512

Malicious code in bioql PyPI...

CVE-2024-31358

Missing Authorization vulnerability in Saleswonder Team: Tobias 5 Stars Rating Funnel 5-stars-rating-funnel.This issue affects 5 Stars Rating Funnel: from n/a through = 1.2.67...

WordPress 5 Stars Rating Funnel plugin 1.2.67 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin 5 Stars Rating Funnel versions = 1.2.67...

PT-2024-24002 · Unknown · 5 Stars Rating Funnel

Name of the Vulnerable Software and Affected Versions: 5 Stars Rating Funnel versions 1.2.67 and earlier Description: The issue is related to a Missing Authorization vulnerability in the 5 Stars Rating Funnel. Recommendations: For versions 1.2.67 and earlier, update to a version that includes the...

CVE-2024-31358: Missing Authorization

Missing Authorization vulnerability in Saleswonder Team: Tobias 5 Stars Rating Funnel 5-stars-rating-funnel.This issue affects 5 Stars Rating Funnel: from n/a through = 1.2.67...

WordPress 5 Stars Rating Funnel plugin <= 1.2.67 - Arbitrary Content Deletion vulnerability

Arbitrary Content Deletion vulnerability discovered by Emili Castells Patchstack Alliance in WordPress Plugin 5 Stars Rating Funnel versions = 1.2.67...

VulnCheck KEV: CVE-2024-31358

Missing Authorization vulnerability in Saleswonder.Biz 5 Stars Rating Funnel.This issue affects 5 Stars Rating Funnel: from n/a through 1.2.67...

WordPress 5 Stars Rating Funnel Plugin <= 1.2.67 is vulnerable to Arbitrary Content Deletion

Software 5 Stars Rating Funnel Type Plugin Vulnerable versions = 1.2.67 Fixed in 1.3.02 OWASP Top 10 A1: Broken Access Control Classification Arbitrary Content Deletion CVE CVE-2024-31358 Patch priority Medium CVSS severity Medium 7.5 Developer Tobias PSID bd96c1e147ac Credits Emili Castells...