CVE-2026-100508

Unauthenticated Denial of Service Attack in Two Factor = 0.16.0 versions...

CVE-2026-100508 WordPress Two Factor plugin <= 0.16.0 - Denial of Service Attack vulnerability

Unauthenticated Denial of Service Attack in Two Factor = 0.16.0 versions...

CVE-2026-100508

The WordPress Two Factor plugin versions

EUVD-2026-89938

Unauthenticated Denial of Service Attack in Two Factor = 0.16.0 versions...

WordPress Two Factor plugin <= 0.16.0 - Denial of Service Attack vulnerability

Denial of Service Attack vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Two Factor versions = 0.16.0...

2FA-Bypass-using-a-Brute-Force-Attack-CVE-2025-60424

Bypass de 2FA mediante un ataque de fuerza bruta Resumen La aplicación Nagios Fusion versiones 2024R1.2 y 2024R2 es vulnerable a un ataque de fuerza bruta sobre su mecanismo de autenticación de dos factores 2FA. En concreto, la implementación de 2FA no aplica adecuadamente límites de tasa ni...

Linux Distros Unpatched Vulnerability : CVE-2026-53628

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is a free asset and IT management software package. From 0.84 until 10.0.26 and 11.0.8, an administrator holding the Update auth and sync or Update auth,...

CVE-2024-10924

CVE-2024-10924 Omisión de Autenticación en Really Simple Security Free, Pro y Pro Multisite 9.0.0 – 9.1.1.1 Descripción Los plugins Really Simple Security Free, Pro y Pro Multisite para WordPress son vulnerables a la omisión de autenticación en las versiones 9.0.0 a 9.1.1.1. Esto se debe a un...

CVE-2024-10924

PoC para CVE-2024-10924 Un fallo de manejo de errores en la API REST del plugin de WordPress Really Simple Plugins versiones entre la 9.0.0 y la 9.1.1.1, ambas incluidas permite a un atacante, cuando la autenticación de dos factores está habilitada, evadir la autenticación y tomar el control de u...

wordpress-really-simple-security-authn-bypass-vulnerable-application

wordpress-really-simple-security-authn-bypass-vulnerable-application This is a vulnerable application to test the exploit for the Really Simple Security 9.1.2 authentication bypass CVE-2024-10924. WARNING! This application contains serious security vulnerabilities. Run it at your own risk! It is...

wordpress-really-simple-security-authn-bypass-vulnerable-application

wordpress-really-simple-security-authn-bypass-vulnerable-application Esta es una aplicación vulnerable para probar el exploit de la omisión de autenticación de Really Simple Security 9.1.2 CVE-2024-10924. ¡ADVERTENCIA! Esta aplicación contiene vulnerabilidades de seguridad graves. ¡Úsala bajo tu...

CVE-2024-10924

Exploit para CVE-2024-10924 Plugin Really Simple Security de WordPress - Bypass de Autenticación 📌 Descripción General CVE-2024-10924 es una vulnerabilidad crítica de omisión de autenticación en el plugin Really Simple Security para WordPress versiones 9.0.0 a 9.1.1.1. Esta vulnerabilidad permite...

CVE-2024-10924-Exploit

CVE-2024-10924-Exploit Really Simple Security Free, Pro y Pro Multisite 9.0.0 - 9.1.1.1 - Bypass de autenticación 📖 Descripción Este script explota una vulnerabilidad en el plugin Really Simple Security versiones 9.0.0 - 9.1.1.1 para WordPress. El fallo permite un bypass de autenticación debido a...

CVE-2024-10924-Wordpress-Docker

CVE-2024-10924 : Vulnerabilidad de omisión de autenticación en Really Simple Security para WordPress en Docker Descripción Los complementos Really Simple Security Free, Pro y Pro Multisite para WordPress, versiones 9.0.0 a 9.1.1.1, se ven afectados por una vulnerabilidad de omisión de...

CVE-2026-100712

froxlor through 2.3.10 disables a user's two-factor authentication immediately upon an unauthenticated-triggerable GET request to the 2FA management page e.g. /customerindex.php?page=2fa&action=delete, with no confirmation, re-authentication, or CSRF token. The global CSRF middleware only covers...

CVE-2026-100667

grav-plugin-login the Grav CMS Login plugin versions = 3.8.7 and 3.9.7 allow the two-factor authentication challenge to be bypassed for content gated by the authenticated Twig function or the authenticated shortcode. On sites with 2FA enabled, Login::isAuthenticated checked only the session flag...

CVE-2026-100712 froxlor before 2.3.12 Two-Factor Authentication Bypass via CSRF

froxlor through 2.3.10 disables a user's two-factor authentication immediately upon an unauthenticated-triggerable GET request to the 2FA management page e.g. /customerindex.php?page=2fa&action=delete, with no confirmation, re-authentication, or CSRF token. The global CSRF middleware only covers...

CVE-2026-100712 froxlor before 2.3.12 Two-Factor Authentication Bypass via CSRF

froxlor through 2.3.10 disables a user's two-factor authentication immediately upon an unauthenticated-triggerable GET request to the 2FA management page e.g. /customerindex.php?page=2fa&action=delete, with no confirmation, re-authentication, or CSRF token. The global CSRF middleware only covers...

EUVD-2026-87685

froxlor through 2.3.10 disables a user's two-factor authentication immediately upon an unauthenticated-triggerable GET request to the 2FA management page e.g. /customerindex.php?page=2fa&action=delete, with no confirmation, re-authentication, or CSRF token. The global CSRF middleware only covers...

CVE-2026-100712

The froxlor software (versions through 2.3.10 ) is vulnerable to a Cross-Site Request Forgery (CSRF) attack that disables a user's two-factor authentication (2FA) . The root cause is that the 2FA management page (e.g., /customer_index.php?page=2fa&action=delete) responds to unauthenticated-trigge...