Skip to content
OpenAdvisories

Product · melapress

WP 2FA – Two-factor authentication for WordPress

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2023-6506

    WP 2FA <= 2.5.0 - Insecure Direct Object Reference to Arbitrary Email Sending

    The WP 2FA – Two-factor authentication for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.5.0 via the send_backup_codes_email due to missing validation on a user controlled key. This ma…

    melapress WP 2FA – Two-factor authentication for WordPress Web / CMS
  • Medium 4.3
    CVE-2023-6520

    WP 2FA – Two-factor authentication for WordPress <= 2.5.0 - Cross-Site Request Forgery

    The WP 2FA – Two-factor authentication for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.5.0. This is due to missing or incorrect nonce validation on the send_backup_codes_email function. Th…

    melapress WP 2FA – Two-factor authentication for WordPress Web / CMS