Threats tagged 'ghsa-cg7c-763h-xv22'

The Security For WooCommerce WordPress plugin up to version 1.0.16 has a vulnerability that allows unauthenticated users to request and obtain a user's current two-factor authentication (2FA) code or secret. This flaw enables attackers to bypass the second factor of authentication on sites using this plugin's one-time password library.