Skip to content
OpenAdvisories

Vendor

youtag

3 known vulnerabilities.

Products

Two-factor authentication (formerly IP Vault) 2 ShowTime Slideshow 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-8903

    Two-factor authentication (formerly IP Vault) <= 2.1 - Cross-Site Request Forgery to Settings Update

    The Two-factor authentication (formerly IP Vault) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1. This is due to missing or incorrect nonce validation on the ipv_save_changes function. This makes it …

    youtag Two-factor authentication (formerly IP Vault) Web / CMS
  • Medium 5.3
    CVE-2022-4536

    IP Vault – WP Firewall <= 1.1 - IP Address Spoofing to Protection Mechanism Bypass

    The IP Vault – WP Firewall plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 1.1. This is due to insufficient restrictions on where the IP Address information is being retrieved for request logging and login restricti…

    youtag Two-factor authentication (formerly IP Vault) Web / CMS