WP Cerber before 8.9.3 allows MFA bypass via wordpress_logged_in_[hash] manipulation.

Published Aug 19, 2021 · Updated Aug 4, 2024 · Assigned by mitre