Lucene search

K

Simbahosting Security Vulnerabilities

cve
cve

CVE-2015-9355

The two-factor-authentication plugin before 1.1.10 for WordPress has XSS in the admin...

6.1CVSS

6AI Score

0.001EPSS

2019-08-28 12:15 PM
24
cve
cve

CVE-2018-20231

Cross Site Request Forgery (CSRF) in the two-factor-authentication plugin before 1.3.13 for WordPress allows remote attackers to disable 2FA via the tfa_enable_tfa parameter due to missing nonce...

8.8CVSS

8.8AI Score

0.008EPSS

2018-12-19 11:29 AM
22