CVE-2024-10245

CVE-2024-10245 Relais 2FA = 1.0 – Omisión de Autenticación Descripción El plugin Relais 2FA para WordPress es vulnerable a la omisión de autenticación en versiones hasta la 1.0 inclusive. Esto se debe a una comprobación incorrecta de autenticación y capacidades en la función 'rldoajax'. Esto...

CVE-2024-10245

The Relais 2FA plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.0. This is due to incorrect authentication and capability checking in the 'rldoajax' function. This makes it possible for unauthenticated attackers to log in as any existing user on the...

CVE-2024-10245 Relais 2FA <= 1.0 - Authentication Bypass

The Relais 2FA plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.0. This is due to incorrect authentication and capability checking in the 'rldoajax' function. This makes it possible for unauthenticated attackers to log in as any existing user on the...

CVE-2024-10245

CVE-2024-10245 (Relais 2FA for WordPress) : The Relais 2FA plugin contains an authentication bypass in versions

CVE-2024-10245 Relais 2FA <= 1.0 - Authentication Bypass

The Relais 2FA plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.0. This is due to incorrect authentication and capability checking in the 'rldoajax' function. This makes it possible for unauthenticated attackers to log in as any existing user on the...

PT-2024-16135

Name of the Vulnerable Software and Affected Versions Relais 2FA plugin for WordPress versions up to, and including, 1.0 Description The issue is due to incorrect authentication and capability checking in the rl do ajax function, allowing unauthenticated attackers to log in as any existing user o...

WordPress Relais 2FA Plugin <= 1.0 is vulnerable to Broken Authentication

Software Relais 2FA Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A7: Identification and Authentication Failures Classification Broken Authentication CVE CVE-2024-10245 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 461a7cd31084 Credits István Márton...

CVE-2024-10245: Authentication Bypass Using an Alternate Path or Channel

The Relais 2FA plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.0. This is due to incorrect authentication and capability checking in the 'rldoajax' function. This makes it possible for unauthenticated attackers to log in as any existing user on the...