PT-2022-26445 · Miniorange · Miniorange'S Google Authenticator Plugin
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
miniOrange's Google Authenticator plugin versions <= 5.6.1
Description
The issue is related to a Broken Access Control vulnerability. This vulnerability affects miniOrange's Google Authenticator plugin on WordPress, potentially allowing unauthorized access.
Recommendations
For versions <= 5.6.1, update to a version higher than 5.6.1 to resolve the issue.
At the moment, there is no information about other specific mitigation measures for this vulnerability.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Miniorange'S Google Authenticator Plugin