CVE-2022-44589

概要

参考情報

• patchstack.com/database/vulnerability/miniorange-2-factor-authentication/wordpress-miniorange-two-factor-authentication-plugin-5-6-1-sensitive-data-exposure-vulnerability · Third Party Advisory

google authenticator のその他の脆弱性

• CVE-2022-4943中 5.3The miniOrange's Google Authenticator plugin for WordPress is vulnerable to authorization bypass due to a missing capability check when chan…
• CVE-2022-42461高 8.8Broken Access Control vulnerability in miniOrange's Google Authenticator plugin <= 5.6.1 on WordPress.
• CVE-2022-1321中 4.8The miniOrange's Google Authenticator WordPress plugin before 5.5.6 does not sanitise and escape some of its settings, leading to malicious …
• CVE-2022-0875中 4.3The Google Authenticator WordPress plugin before 1.0.5 does not have CSRF check when saving its settings, and does not sanitise as well as e…
• CVE-2022-0229高 8.1The miniOrange's Google Authenticator WordPress plugin before 5.5 does not have proper authorisation and CSRF checks when handling the recon…