Lucene search
+L

6 matches found

NVD
NVD
•added 2025/10/15 9:15 a.m.•15 views

CVE-2025-10293

The Keyy Two Factor Authentication like Clef plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.2.3. This is due to the plugin not properly validating a user's identity associated with a token generated. This makes it possible f...

8.8CVSS0.00354EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/10/15 8:25 a.m.•11 views

CVE-2025-10293 Keyy Two Factor Authentication (like Clef) <= 1.2.3 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover

The Keyy Two Factor Authentication like Clef plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.2.3. This is due to the plugin not properly validating a user's identity associated with a token generated. This makes it possible f...

8.8CVSS5.7AI score0.00354EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2025/10/15 1:12 a.m.•18 views

WordPress Keyy Two Factor Authentication (like Clef) plugin <= 1.2.3 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin Keyy Two Factor Authentication like Clef versions = 1.2.3...

8.8CVSS5.8AI score0.00354EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/15 12:00 a.m.•10 views

CVE-2025-10293: Improper Authentication

The Keyy Two Factor Authentication like Clef plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.2.3. This is due to the plugin not properly validating a user's identity associated with a token generated. This makes it possible f...

8.8CVSS5.7AI score0.00354EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/10/15 12:00 a.m.•10 views

PT-2025-42290

Name of the Vulnerable Software and Affected Versions Keyy Two Factor Authentication plugin for WordPress versions prior to 1.2.4 Description The Keyy Two Factor Authentication plugin for WordPress is susceptible to privilege escalation, potentially leading to account takeover. The issue stems fr...

8.8CVSS5.8AI score0.00354EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2025/10/15 12:00 a.m.•15 views

WordPress plugin Keyy Two Factor Authentication has a vulnerability regarding authorization issues.

WordPress Keyy Two Factor Authentication plugin is a plugin for enhancing the login security of your website. A privilege escalation vulnerability exists in the WordPress Keyy Two Factor Authentication plugin, which can be exploited by an attacker to cause an elevation of privilege, due to a...

8.8CVSS5.8AI score0.00354EPSS
SaveExploits0References3
Rows per page
Query Builder