CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

Circl•added 2021/08/19 10:18 p.m.•6 views

CVE-2021-37597

creationtimestamp| type| source ---|---|--- 2021-08-19 22:18:16+00:00| seen| https://t.me/cibsecurity/27619...

9.8CVSS7.3AI score0.02124EPSS

Exploits1References1

ATTACKERKB•added 2021/08/19 7:15 p.m.•4 views

CVE-2021-37597

WP Cerber before 8.9.3 allows MFA bypass via wordpressloggedinhash manipulation...

9.8CVSS7.2AI score0.02124EPSS

Exploits1References3

CVE•added 2021/08/19 6:51 p.m.•54 views

CVE-2021-37597

CVE-2021-37597 affects WordPress WP Cerber plugin versions prior to 8.9.3, where MFA can be bypassed by manipulating the wordpress_logged_in_[hash] value. The issue is described in multiple sources as a 2FA bypass vulnerability with high impact. A fix is available in version 8.9.3 and later; upgr...

9.8CVSS9.5AI score0.02124EPSS

Exploits1References2Affected Software1