CVE-2024-9820

creationtimestamp| type| source ---|---|--- 2024-10-15 05:13:42+00:00| seen| https://t.me/cvedetector/7875...

CVE-2024-9820 WP 2FA with Telegram <= 3.0 - Two-Factor Authentication Bypass

The WP 2FA with Telegram plugin for WordPress is vulnerable to Two-Factor Authentication Bypass in versions up to, and including, 3.0. This is due to the two-factor code being stored in a cookie, which makes it possible to bypass two-factor authentication...

WordPress WP 2FA with Telegram Plugin <= 3.0 is vulnerable to Bypass Vulnerability

Software WP 2FA with Telegram Type Plugin Vulnerable versions = 3.0 Fixed in 3.1 OWASP Top 10 A4: Insecure Design Classification Bypass Vulnerability CVE CVE-2024-9820 Patch priority High CVSS severity High 6.5 Developer Claim ownership PSID ed4d0a1bac8d Credits István Márton Required privilege...