CVE-2025-12628: CVE-2025-12628: güvenlik açığı

Açıklama (NVD)

The WP 2FA WordPress plugin does not generate backup codes with enough entropy, which could allow attackers to bypass the second factor by brute forcing them

Özet bilgiler

CVSS v3.1

6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

EPSS

%0,22 (yüzdelik 13)

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• wpscan.com