https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T07:48:15.779127+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-9687 CVE-2024-9687 — WP 2FA with Telegram <= 3.0 - Authenticated (Subscriber+) Authentication Bypass 2026-10-05T07:48:15.780263+00:00

Affected: dueclic AuthPress, dueclic wp_2fa_with_telegram

The WP 2FA with Telegram plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 3.0. This is due to insufficient validation of the user-controlled key on the 'validate_tg' action. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to log in as any existing user on the site, such as an administrator.