Non notée
CVE-2023-6272 The Theme My Login 2FA WordPress plugin before 1.2 does not rate limit 2FA validation attempts, which may allow an…
Description
The Theme My Login 2FA WordPress plugin before 1.2 does not rate limit 2FA validation attempts, which may allow an attacker to brute-force all possibilities, which shouldn't be too long, as the 2FA codes are 6 digits.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| tml-2fa 1.2 | premières → < 1.2 | 1.2 |