The Theme My Login 2FA WordPress plugin before 1.2 does not rate limit 2FA validation attempts, which may allow an attacker to brute-force all possibilities, which shouldn't be too long, as the 2FA codes are 6 digits.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: WPScan
Published: 2023-12-18T20:07:55.945Z
Updated: 2024-08-02T08:28:20.359Z
Reserved: 2023-11-24T02:55:26.251Z
Link: CVE-2023-6272
Vulnrichment
No data.
NVD
Status : Modified
Published: 2023-12-18T20:15:08.940
Modified: 2024-11-21T08:43:30.430
Link: CVE-2023-6272
Redhat
No data.