CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.5. It affects WordPress.
CVE
CVE-2024-9820
Severity
MEDIUM
CVSS
6.5
EPSS
0.40%
WordPress
Original NVD Description
The WP 2FA with Telegram plugin for WordPress is vulnerable to Two-Factor Authentication Bypass in versions up to, and including, 3.0. This is due to the two-factor code being stored in a cookie, which makes it possible to bypass two-factor authentication.
Related CVEs
Other vulnerabilities affecting the same vendor(s)