Threats tagged 'ghsa-cf3c-vhpc-r6rv'

A vulnerability in The Security Plugin, Firewall & Malware Scanner with Auto Removal WordPress plugin versions prior to 2.191 allows bypassing password verification during login when using two-factor authentication. An attacker possessing a valid current authenticator app code can log in as any user, including administrators, without needing the account password.