Not rated
CVE-2023-6272 The Theme My Login 2FA WordPress plugin before 1.2 does not rate limit 2FA validation attempts, which may allow an…
Description
The Theme My Login 2FA WordPress plugin before 1.2 does not rate limit 2FA validation attempts, which may allow an attacker to brute-force all possibilities, which shouldn't be too long, as the 2FA codes are 6 digits.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| tml-2fa 1.2 | earliest → < 1.2 | 1.2 |