CVE-2022-44589

Mô tả

Tham khảo

• patchstack.com/database/vulnerability/miniorange-2-factor-authentication/wordpress-miniorange-two-factor-authentication-plugin-5-6-1-sensitive-data-exposure-vulnerability · Third Party Advisory

Lỗ hổng khác của google authenticator

• CVE-2022-4943TRUNG BÌNH 5.3The miniOrange's Google Authenticator plugin for WordPress is vulnerable to authorization bypass due to a missing capability check when chan…
• CVE-2022-42461CAO 8.8Broken Access Control vulnerability in miniOrange's Google Authenticator plugin <= 5.6.1 on WordPress.
• CVE-2022-1321TRUNG BÌNH 4.8The miniOrange's Google Authenticator WordPress plugin before 5.5.6 does not sanitise and escape some of its settings, leading to malicious …
• CVE-2022-0875TRUNG BÌNH 4.3The Google Authenticator WordPress plugin before 1.0.5 does not have CSRF check when saving its settings, and does not sanitise as well as e…
• CVE-2022-0229CAO 8.1The miniOrange's Google Authenticator WordPress plugin before 5.5 does not have proper authorisation and CSRF checks when handling the recon…