Description
The WP 2FA WordPress plugin does not generate backup codes with enough entropy, which could allow attackers to bypass the second factor by brute forcing them
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | WP 2FA | < 3.0.0 | 3.0.0 |
References
- https://wpscan.com/vulnerability/5e2d033c-dde6-4774-8588-cbe268c0d797/ exploit vdb-entry technical-description