Threats tagged 'ghsa-9wr6-gc4g-7v5m'

The Security Optimizer WordPress plugin versions before 1.6.9 have a vulnerability where the number of two-factor authentication (2FA) code submissions for a pending login is not limited. This flaw allows an attacker who already knows a user's password to brute force the second factor and gain unauthorized access to the account.