Filtered by vendor Simbahosting Subscriptions
Filtered by product Two-factor-authentication Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2018-20231 1 Simbahosting 1 Two-factor-authentication 2024-11-21 N/A
Cross Site Request Forgery (CSRF) in the two-factor-authentication plugin before 1.3.13 for WordPress allows remote attackers to disable 2FA via the tfa_enable_tfa parameter due to missing nonce validation.
CVE-2015-9355 1 Simbahosting 1 Two-factor-authentication 2024-11-21 N/A
The two-factor-authentication plugin before 1.1.10 for WordPress has XSS in the admin area.