WP 2FA < 2.6.0 - Subscriber+ Arbitrary Email Sending

2024-01-0300:00:00

wpscan.com

wordpress 2fa

vulnerability

email sending

subscriber-level

user controlled key

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.3%

JSON

Description The plugin is vulnerable to Insecure Direct Object Reference via the send_backup_codes_email due to missing validation on a user controlled key. This makes it possible for subscriber-level attackers to email arbitrary users on the site.

CPENameOperatorVersion
eq2.6.0

CPE	Name	Operator	Version
		eq	2.6.0

References

www.wordfence.com/threat-intel/vulnerabilities/id/caff9be6-4161-47a0-ba47-6c8fc0c4ab40