939 matches found
CVE-2026-12695 miniOrange 2FA < 6.2.6 - 2FA Bypass via Attacker-Controlled ga_secret
The miniOrange 2FA WordPress plugin before 6.2.6 does not validate the submitted one-time password against the targeted user's stored secret, instead verifying it against an attacker-supplied value, allowing an unauthenticated attacker who knows a victim's password to bypass two-factor...
CVE-2022-0992
The SiteGround Security plugin for WordPress is vulnerable to authentication bypass that allows unauthenticated users to log in as administrative users due to missing identity verification on initial 2FA set-up that allows unauthenticated and unauthorized users to configure 2FA for pending...
CVE-2019-12363
An CSRF issue was discovered in the JN-Jones MyBB-2FA plugin through 2014-11-05 for MyBB. An attacker can forge a request to an installed mybb2fa plugin to control its state via usercp.php?action=mybb2fa=deactivate or usercp.php?action=mybb2fa=activate. A deactivate operation lowers the security ...
EUVD-2019-3998
Malware in sbrugna...
EUVD-2019-7577
Malware in sbrugna...
EUVD-2019-6569
Malware in sbrugna...
EUVD-2019-7579
Malware in sbrugna...
EUVD-2019-7580
Malware in sbrugna...
EUVD-2019-7575
Malware in sbrugna...
EUVD-2019-7576
Malware in sbrugna...
EUVD-2019-0155
Malware in sbrugna...
EUVD-2019-7578
Malware in sbrugna...
EUVD-2021-26485
Malware in sbrugna...
EUVD-2020-0234
Malware in sbrugna...
EUVD-2020-21517
Malware in sbrugna...
EUVD-2022-15986
Malicious code in bioql PyPI...
EUVD-2022-34575
Malicious code in bioql PyPI...
EUVD-2022-24825
Malicious code in bioql PyPI...