CVE-2022-2891
WP 2FA < 2.3.0 - Time-Based Side-Channel Attack
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The WP 2FA WordPress plugin before 2.3.0 uses comparison operators that don't mitigate time-based attacks, which could be abused to leak information about the authentication codes being compared.
| Vendor | unknown |
| Product | wp 2fa |
| Published | Oct 10, 2022 |
| Last Updated | Aug 3, 2024 |
Stay Ahead of the Next One
Get instant alerts for unknown wp 2fa
Be the first to know when new unknown vulnerabilities affecting unknown wp 2fa are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / WP 2FA
0 < 2.3.0
References
Credits
Calvin Alkan WPScan