CVE-2025-10293: Improper Authentication

The Keyy Two Factor Authentication like Clef plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.2.3. This is due to the plugin not properly validating a user's identity associated with a token generated. This makes it possible f...

PT-2025-42290

Name of the Vulnerable Software and Affected Versions Keyy Two Factor Authentication plugin for WordPress versions prior to 1.2.4 Description The Keyy Two Factor Authentication plugin for WordPress is susceptible to privilege escalation, potentially leading to account takeover. The issue stems fr...