921 matches found
CVE-2018-20231: Cross-Site Request Forgery (CSRF)
Cross Site Request Forgery CSRF in the two-factor-authentication plugin before 1.3.13 for WordPress allows remote attackers to disable 2FA via the tfaenabletfa parameter due to missing nonce validation...
8.8CVSS5.9AI score0.01438EPSS
SaveExploits1References2
20