Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbCalvinWPVDB-ID:301B3DCE-2584-46EC-92ED-1C0626522120
HistorySep 14, 2022 - 12:00 a.m.

WP 2FA < 2.3.0 - Time-Based Side-Channel Attack

2022-09-1400:00:00
Calvin
wpscan.com
7
wordpress 2fa side-channel 2.3.0 security

EPSS

0.002

Percentile

58.7%

JSON

The plugin uses comparison operators that don’t mitigate time-based attacks, which could be abused to leak information about the authentication codes being compared.

Related

cve 1
nvd 1
patchstack 1
cvelist 1
prion 1
cve
cve
CVE-2022-2891
2022-10-10 21:15:10
nvd
nvd
CVE-2022-2891
2022-10-10 21:15:10
patchstack
patchstack
WordPress WP 2FA plugin <= 2.2.1 - Time-Based Side-Channel Attack vulnerability
2022-09-14 00:00:00
cvelist
cvelist
CVE-2022-2891 WP 2FA < 2.3.0 - Time-Based Side-Channel Attack
2022-10-10 00:00:00
prion
prion
Authentication flaw
2022-10-10 21:15:00

EPSS

0.002

Percentile

58.7%

JSON
Related for WPVDB-ID:301B3DCE-2584-46EC-92ED-1C0626522120
cve1nvd1patchstack1cvelist1prion1