Skip to content
OpenAdvisories

Vendor

dueclic

2 known vulnerabilities.

Products

AuthPress 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2024-9687

    WP 2FA with Telegram <= 3.0 - Authenticated (Subscriber+) Authentication Bypass

    The WP 2FA with Telegram plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 3.0. This is due to insufficient validation of the user-controlled key on the 'validate_tg' action. This makes it possible for authenticated…

    dueclic AuthPress Web / CMS