Lucene search
WpvulndbWPVDB-ID:B8DBB1A7-2F25-474D-B2B3-17CEB0D61839HistoryApr 07, 2022 - 12:00 a.m.
SiteGround Security < 1.2.6 - Authorization Weakness to Authentication Bypass via 2-FA Back-up Codes
2022-04-0700:00:00
wpscan.com
9
0.003 Low
EPSS
Percentile
70.7%
The method in which 2FA back-up code authentication is handled by the plugin makes it possible for attackers to log in if they are able to brute force a back-up code for a user or compromise it via other means such as SQL Injection.
| CPE | Name | Operator | Version |
|---|---|---|---|
| sg-security | lt | 1.2.6 |
Related
cvelist
cvelist
CVE-2022-0993
2022-04-19 20:26:36
cve
cve
CVE-2022-0993
2022-04-19 21:15:13
patchstack
patchstack
nvd
nvd
CVE-2022-0993
2022-04-19 21:15:13
prion
prion
Authentication flaw
2022-04-19 21:15:00
packetstorm
packetstorm
WordPress SiteGround Security 1.2.5 Authentication Bypass
2022-04-08 00:00:00
wordfence
wordfence
zdt
zdt
WordPress SiteGround Security 1.2.5 Authentication Bypass Vulnerability
2022-04-08 00:00:00