Medium · 5.3 CVE-2022-44587 EUVD-2022-47525GHSA-2w67-mwp7-3283

WordPress WP 2FA plugin <= 2.6.3 - Sensitive Data Exposure via Log File vulnerability

Published Jun 21, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Insertion of Sensitive Information into Log File vulnerability in WP 2FA allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP 2FA: from n/a through 2.6.3.

Affected products

Vendor	Product	Affected	Fixed
—	WP 2FA	≤ 2.6.3	—

References

https://patchstack.com/database/vulnerability/wp-2fa/wordpress-wp-2fa-plugin-2-6-3-sensitive-data-exposure-via-log-file-vulnerability?_s_id=cve vdb-entry