Lucene search
WPScanCVELIST:CVE-2022-2891HistoryOct 10, 2022 - 12:00 a.m.
CVE-2022-2891 WP 2FA < 2.3.0 - Time-Based Side-Channel Attack
2022-10-1000:00:00
WPScan
www.cve.org
3
wp 2fa
wordpress
time-based side-channel attack
vulnerable
authentication codes
EPSS
0.002
Percentile
58.7%
The WP 2FA WordPress plugin before 2.3.0 uses comparison operators that don’t mitigate time-based attacks, which could be abused to leak information about the authentication codes being compared.
CNA Affected
[
{
"vendor": "Unknown",
"product": "WP 2FA",
"versions": [
{
"status": "affected",
"versionType": "custom",
"version": "0",
"lessThan": "2.3.0"
}
],
"defaultStatus": "unaffected",
"collectionURL": "https://wordpress.org/plugins"
}
]Related
cve
cve
CVE-2022-2891
2022-10-10 21:15:10
nvd
nvd
CVE-2022-2891
2022-10-10 21:15:10
patchstack
patchstack
wpvulndb
wpvulndb
WP 2FA < 2.3.0 - Time-Based Side-Channel Attack
2022-09-14 00:00:00
prion
prion
Authentication flaw
2022-10-10 21:15:00