Threats tagged 'ghsa-f6p5-3fqv-xhh4'

The Security For WooCommerce WordPress plugin versions through 1.0.16 have a vulnerability where unauthenticated users can reset two-factor authentication enrollment without authorization. This flaw allows attackers to remove the second factor from any user account or all accounts at once.