Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 07:47:52 +0000 CVE-2024-9687 — WP 2FA with Telegram <= 3.0 - Authenticated (Subscriber+) Authentication Bypass https://cve.radiocsirt.org/vuln/cve-2024-9687 <p><strong>Affected:</strong> dueclic AuthPress, dueclic wp_2fa_with_telegram</p> <p>The WP 2FA with Telegram plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 3.0. This is due to insufficient validation of the user-controlled key on the &#39;validate_tg&#39; action. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to log in as any existing user on the site, such as an administrator.</p> <p><strong>Affected:</strong> dueclic AuthPress, dueclic wp_2fa_with_telegram</p> <p>The WP 2FA with Telegram plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 3.0. This is due to insufficient validation of the user-controlled key on the &#39;validate_tg&#39; action. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to log in as any existing user on the site, such as an administrator.</p> https://cve.radiocsirt.org/vuln/cve-2024-9687