Lucene search
Joost GrunwaldWPVDB-ID:A03243EA-FEE7-46E4-8037-A228AFC5297AHistoryNov 24, 2023 - 12:00 a.m.
Theme My Login 2FA < 1.2 - Lack of Rate Limiting
2023-11-2400:00:00
Joost Grunwald
wpscan.com
4
plugin
rate limiting
2fa
brute force
6 digits
Description The plugin does not rate limit 2FA validation attempts, which may allow an attacker to brute-force all possibilities, which shouldn’t be too long, as the 2FA codes are 6 digits.
PoC
https://packetstormsecurity.com/2309-exploits/wpmylogin-bruteforce.txt
| CPE | Name | Operator | Version |
|---|---|---|---|
| eq | 1.2 |
Related
wpexploit
wpexploit
Theme My Login 2FA < 1.2 - Lack of Rate Limiting
2023-11-24 00:00:00
cve
cve
CVE-2023-6272
2023-12-18 20:15:08
prion
prion
Design/Logic Flaw
2023-12-18 20:15:00
cvelist
cvelist
CVE-2023-6272 Theme My Login 2FA < 1.2 - Lack of Rate Limiting
2023-12-18 20:07:55
nvd
nvd
CVE-2023-6272
2023-12-18 20:15:08
wordfence
wordfence
7 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
43.5%
Related for WPVDB-ID:A03243EA-FEE7-46E4-8037-A228AFC5297A