Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Simbahosting Subscribe
Filtered by product Two-factor-authentication
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2015-9355 1 Simbahosting 1 Two-factor-authentication 2019-09-03 4.3 MEDIUM 6.1 MEDIUM
The two-factor-authentication plugin before 1.1.10 for WordPress has XSS in the admin area.
CVE-2018-20231 1 Simbahosting 1 Two-factor-authentication 2019-03-15 6.8 MEDIUM 8.8 HIGH
Cross Site Request Forgery (CSRF) in the two-factor-authentication plugin before 1.3.13 for WordPress allows remote attackers to disable 2FA via the tfa_enable_tfa parameter due to missing nonce validation.