Skip to content
Sign in
Not rated

CVE-2022-0875 The Google Authenticator WordPress plugin before 1.0.5 does not have CSRF check when saving its settings, and does not…

Description

The Google Authenticator WordPress plugin before 1.0.5 does not have CSRF check when saving its settings, and does not sanitise as well as escape them, allowing attackers to make a logged in admin change them and perform Cross-Site Scripting attacks

Affected products and versions

Product Affected versions Fixed in
Google Authenticator 1.0 earliest → < 1.0.5 1.0.5

Other CVEs of Google Authenticator

The 2 CVEs of Google Authenticator →
CVE-2026-14204 The Google Authenticator WordPress plugin before 0.56 does not verify a CSRF nonce when saving its two-factor setup,… 6.5 Medium
Track this CVE