WP Cerber Security < 8.9.3 - 2FA Authentication Bypass

2021-08-1900:00:00

wpscan.com

0.003 Low

EPSS

Percentile

69.3%

The plugin improperly checked certain HTTP parameters leading to an administrative multi-factor authentication bypass.

CPENameOperatorVersion
wp-cerberlt8.9.3

CPE	Name	Operator	Version
	wp-cerber	lt	8.9.3

References

github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2021-0023/FEYE-2021-0023.md

0.003 Low

EPSS

Percentile

69.3%

Related for WPVDB-ID:F6EA01BF-5CB9-4A06-A5DA-C141D562FA53