Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cvelistMitreCVELIST:CVE-2018-20231
HistoryDec 19, 2018 - 11:00 a.m.

CVE-2018-20231

2018-12-1911:00:00
mitre
www.cve.org
1

8.9 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.7%

JSON

Cross Site Request Forgery (CSRF) in the two-factor-authentication plugin before 1.3.13 for WordPress allows remote attackers to disable 2FA via the tfa_enable_tfa parameter due to missing nonce validation.

Related

patchstack 1
openvas 1
cve 1
prion 1
wpvulndb 1
nvd 1
patchstack
patchstack
WordPress Two Factor Authentication plugin <= 1.3.12 - Cross-Site Request Forgery (CSRF) vulnerability
2019-01-08 00:00:00
openvas
openvas
WordPress Two Factor Authentication Plugin < 1.3.13 CSRF Vulnerability
2019-02-18 00:00:00
cve
cve
CVE-2018-20231
2018-12-19 11:29:02
prion
prion
Cross site request forgery (csrf)
2018-12-19 11:29:00
wpvulndb
wpvulndb
Two Factor Authentication <= 1.3.12 - Disable Two Factor Authentication CSRF
2018-12-18 00:00:00
nvd
nvd
CVE-2018-20231
2018-12-19 11:29:02

8.9 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.7%

JSON
Related for CVELIST:CVE-2018-20231
patchstack1openvas1cve1prion1wpvulndb1nvd1