WP 2fa
Melapress · 4 CVEs
CVE-2022-44587
HIGH
WordPress WP 2FA plugin <= 2.6.3 - Sensitive Data Exposure via Log File vulnerability
Jun 21, 2024
CVE-2024-32568
HIGH
WordPress WP 2FA plugin <= 2.6.2 - Reflected Cross Site Scripting (XSS) vulnerability
Apr 18, 2024
CVE-2022-44595
MEDIUM
WordPress WP2FA plugin <= 2.2.0 - Broken Authentication vulnerability
Mar 21, 2024
CVE-2023-6520
MEDIUM
WP 2FA – Two-factor authentication for WordPress <= 2.5.0 - Cross-Site Request Forgery
Jan 11, 2024
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2022-44587 | WordPress WP 2FA plugin <= 2.6.3 - Sensitive Data Exposure via Log File vulnerability | HIGH | 0.44% | Jun 21, 2024 |
| CVE-2024-32568 | WordPress WP 2FA plugin <= 2.6.2 - Reflected Cross Site Scripting (XSS) vulnerability | HIGH | 0.41% | Apr 18, 2024 |
| CVE-2022-44595 | WordPress WP2FA plugin <= 2.2.0 - Broken Authentication vulnerability | MEDIUM | 0.48% | Mar 21, 2024 |
| CVE-2023-6520 | WP 2FA – Two-factor authentication for WordPress <= 2.5.0 - Cross-Site Request Forgery | MEDIUM | 0.25% | Jan 11, 2024 |
Showing 1 to 4 of 4 CVEs