| Package | Affected versions | Patched versions |
|---|---|---|
| wp 2fa | < 2.3.0 | 2.3.0 |
The WP 2FA WordPress plugin before 2.3.0 uses comparison operators that don't mitigate time-based attacks, which could be abused to leak information about the authentication codes being compared.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free