Simbahosting

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Simbahosting records in CISA KEV

No Simbahosting vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Two-factor-authentication 2 records MEDIUM

Records

2 records

TI-2018-14338 CVE-2018-20231 · GHSA-8q45-26qh-9jxc

Cross Site Request Forgery (CSRF) in the two-factor-authentication plugin before 1.3.13…

MEDIUM 41

Cross Site Request Forgery (CSRF) in the two-factor-authentication plugin before 1.3.13 for WordPress allows remote attackers to disable 2FA via the tfa_enable_tfa parameter due to missing nonce validation.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01438 Published 2018-12-19 No fix listed CWE-352

TI-2015-07732 CVE-2015-9355 · GHSA-m6j6-mh2m-j5hq

The two-factor-authentication plugin before 1.1.10 for WordPress has XSS in the admin area.

LOW 29

The two-factor-authentication plugin before 1.1.10 for WordPress has XSS in the admin area.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00987 Published 2019-08-28 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0