Lucene search
PatchstackVULNRICHMENT:CVE-2022-44595HistoryMar 21, 2024 - 5:12 p.m.
CVE-2022-44595 WordPress WP2FA plugin <= 2.2.0 - Broken Authentication vulnerability
2024-03-2117:12:32
CWE-287
Patchstack
github.com
wordpress
wp2fa
authentication
bypass
vulnerability
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
SSVC
Exploitation
none
Automatable
no
Technical Impact
total
Improper Authentication vulnerability in Melapress WP 2FA allows Authentication Bypass.This issue affects WP 2FA: from n/a through 2.2.0.
ADP Affected
[
{
"cpes": [
"cpe:2.3:a:melapress:wp_2fa:*:*:*:*:*:wordpress:*:*"
],
"vendor": "melapress",
"product": "wp_2fa",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "2.2.0"
}
],
"defaultStatus": "unaffected"
}
]
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
SSVC
Exploitation
none
Automatable
no
Technical Impact
total
Related for VULNRICHMENT:CVE-2022-44595