Two-factor-authentication Security Vulnerabilities and Issues — Two-factor-authentication CVE List

Lucene search

SimbahostingTwo-factor-authentication

2 matches found

CVE•added 2019/08/28 12:15 p.m.•37 views

CVE-2015-9355

The two-factor-authentication plugin before 1.1.10 for WordPress has XSS in the admin area.

6.1CVSS6AI score0.0025EPSS

CVE•added 2018/12/19 11:29 a.m.•37 views

CVE-2018-20231

Cross Site Request Forgery (CSRF) in the two-factor-authentication plugin before 1.3.13 for WordPress allows remote attackers to disable 2FA via the tfa_enable_tfa parameter due to missing nonce validation.

8.8CVSS8.8AI score0.00134EPSS