Lucene search
+L

8 matches found

CNVD
CNVD
added 2025/10/21 12:0 a.m.3 views

WordPress Keyy Two Factor Authentication plugin Privilege Escalation Vulnerability

WordPress Keyy Two Factor Authentication plugin is a plugin for enhancing the login security of your website. A privilege escalation vulnerability exists in the WordPress Keyy Two Factor Authentication plugin, which can be exploited by an attacker to cause an elevation of privilege, due to a...

8.8CVSS7AI score0.00333EPSS
Exploits0References1
NVD
NVD
added 2025/10/15 9:15 a.m.4 views

CVE-2025-10293

The Keyy Two Factor Authentication like Clef plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.2.3. This is due to the plugin not properly validating a user's identity associated with a token generated. This makes it possible f...

8.8CVSS0.00333EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/10/15 8:25 a.m.4 views

CVE-2025-10293 Keyy Two Factor Authentication (like Clef) <= 1.2.3 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover

The Keyy Two Factor Authentication like Clef plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.2.3. This is due to the plugin not properly validating a user's identity associated with a token generated. This makes it possible f...

8.8CVSS6AI score0.00333EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/10/15 8:25 a.m.8 views

CVE-2025-10293 Keyy Two Factor Authentication (like Clef) <= 1.2.3 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover

The Keyy Two Factor Authentication like Clef plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.2.3. This is due to the plugin not properly validating a user's identity associated with a token generated. This makes it possible f...

8.8CVSS0.00333EPSS
Exploits0References2
Patchstack
Patchstack
added 2025/10/15 1:12 a.m.7 views

WordPress Keyy Two Factor Authentication (like Clef) plugin <= 1.2.3 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin Keyy Two Factor Authentication like Clef versions = 1.2.3...

8.8CVSS6.7AI score0.00333EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2025/10/15 12:0 a.m.4 views

WordPress plugin Keyy Two Factor Authentication 授权问题漏洞

WordPress Keyy Two Factor Authentication plugin is a plugin for enhancing the login security of your website. A privilege escalation vulnerability exists in the WordPress Keyy Two Factor Authentication plugin, which can be exploited by an attacker to cause an elevation of privilege, due to a...

8.8CVSS6.7AI score0.00333EPSS
Exploits0References3
OSV
OSV
added 2025/08/14 6:52 p.m.1 views

MAL-2025-24439 Malicious code in keyy (npm)

The package keyy was found to contain malicious code...

7.2AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.1 views

Malicious code in keyy (npm)

The package keyy was found to contain malicious code...

7AI score
Exploits0
Rows per page
Query Builder