cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score
CVE-2024-9820,https://securityvulnerability.io/vulnerability/CVE-2024-9820,Two-Factor Authentication Bypass in WP 2FA with Telegram Plugin,"The WP 2FA with Telegram plugin for WordPress contains a vulnerability that allows attackers to bypass Two-Factor Authentication (2FA). This issue arises from the insecure storage of the two-factor authentication code in cookies, rendering it accessible and exploitable. As a result, unauthorized access to user accounts may occur, compromising the security integrity of WordPress sites using this plugin.",Wordpress,WP 2fa With Telegram,7.5,HIGH,0.0004799999878741801,false,,false,false,false,,false,false,2024-10-15T02:03:53.185Z,0
CVE-2024-9687,https://securityvulnerability.io/vulnerability/CVE-2024-9687,Authentication Bypass Vulnerability in WP 2FA with Telegram Plugin,"The WP 2FA with Telegram plugin for WordPress, specifically in versions up to and including 3.0, is affected by an authentication bypass vulnerability. This arises from inadequate validation of a user-controlled key during the 'validate_tg' action. As a result, authenticated attackers with at least subscriber-level permissions can exploit this flaw to gain unauthorized access, potentially allowing them to log in as any existing user on the site, including administrators, thereby compromising the integrity and security of the affected WordPress installations.",Wordpress,WP 2fa With Telegram,8.8,HIGH,0.0005000000237487257,false,,false,false,false,,false,false,2024-10-15T02:03:49.768Z,0