dueclic

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

dueclic records in CISA KEV

No dueclic vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Wp 2fa With Telegram · all components

TI-2024-08988 CVE-2024-9687 · GHSA-rfxp-9x8m-jfw8

MEDIUM 41

The WP 2FA with Telegram plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 3.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00482 Published 2024-10-15 No fix listed CWE-639

TI-2024-09113 CVE-2024-9820 · GHSA-x23h-whff-jxq7

LOW 33

The WP 2FA with Telegram plugin for WordPress is vulnerable to Two-Factor Authentication Bypass in versions up to, and including, 3.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00402 Published 2024-10-15 No fix listed CWE-784