Lucene search
+L

10 matches found

CNVD
CNVD
•added 2025/10/21 12:00 a.m.•16 views

WordPress Keyy Two Factor Authentication plugin Privilege Escalation Vulnerability

WordPress Keyy Two Factor Authentication plugin is a plugin for enhancing the login security of your website. A privilege escalation vulnerability exists in the WordPress Keyy Two Factor Authentication plugin, which can be exploited by an attacker to cause an elevation of privilege, due to a...

8.8CVSS5.8AI score0.00354EPSS
SaveExploits0References1
NVD
NVD
•added 2025/10/15 9:15 a.m.•15 views

CVE-2025-10293

The Keyy Two Factor Authentication like Clef plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.2.3. This is due to the plugin not properly validating a user's identity associated with a token generated. This makes it possible f...

8.8CVSS0.00354EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/10/15 8:25 a.m.•11 views

CVE-2025-10293 Keyy Two Factor Authentication (like Clef) <= 1.2.3 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover

The Keyy Two Factor Authentication like Clef plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.2.3. This is due to the plugin not properly validating a user's identity associated with a token generated. This makes it possible f...

8.8CVSS5.7AI score0.00354EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/10/15 8:25 a.m.•27 views

CVE-2025-10293 Keyy Two Factor Authentication (like Clef) <= 1.2.3 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover

The Keyy Two Factor Authentication like Clef plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.2.3. This is due to the plugin not properly validating a user's identity associated with a token generated. This makes it possible f...

8.8CVSS0.00354EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2025/10/15 1:12 a.m.•18 views

WordPress Keyy Two Factor Authentication (like Clef) plugin <= 1.2.3 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin Keyy Two Factor Authentication like Clef versions = 1.2.3...

8.8CVSS5.8AI score0.00354EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/15 12:00 a.m.•10 views

CVE-2025-10293: Improper Authentication

The Keyy Two Factor Authentication like Clef plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.2.3. This is due to the plugin not properly validating a user's identity associated with a token generated. This makes it possible f...

8.8CVSS5.7AI score0.00354EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/10/15 12:00 a.m.•14 views

WordPress plugin Keyy Two Factor Authentication 授权问题漏洞

WordPress Keyy Two Factor Authentication plugin is a plugin for enhancing the login security of your website. A privilege escalation vulnerability exists in the WordPress Keyy Two Factor Authentication plugin, which can be exploited by an attacker to cause an elevation of privilege, due to a...

8.8CVSS5.8AI score0.00354EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/10/15 12:00 a.m.•8 views

PT-2025-42290

Name of the Vulnerable Software and Affected Versions Keyy Two Factor Authentication plugin for WordPress versions prior to 1.2.4 Description The Keyy Two Factor Authentication plugin for WordPress is susceptible to privilege escalation, potentially leading to account takeover. The issue stems fr...

8.8CVSS5.8AI score0.00354EPSS
SaveExploits0References7
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•3 views

Malicious code in keyy (npm)

The package keyy was found to contain malicious code...

7AI score
SaveExploits0
osv_mal
osv_mal
•added 2025/08/14 6:52 p.m.•6 views

MAL-2025-24439 Malicious code in keyy (npm)

The package keyy was found to contain malicious code...

7.2AI score
SaveExploits0
Rows per page
Query Builder