Login Request a demo
GA
Product
Google Authenticator
by Miniorange · last CVE Dec 29, 2023
6
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 0High 3Medium 3Low 0
Severity
All severities6Critical0High3Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Google Authenticator to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-4943
5.3
1%
Oct 20
The miniOrange's Google Authenticator plugin for WordPress is vulnerable to authorization bypass due to a missing capability check when changing plugin settings in versions up to,…
Affected: through 5.6.5
CVE-2022-1321
4.8
1%
Jun 27
The miniOrange's Google Authenticator WordPress plugin before 5.5.6 does not sanitise and escape some of its settings, leading to malicious users with administrator privileges to…
Affected: before 5.5.6
CVE-2022-0875
4.3
0%
Jun 27
The Google Authenticator WordPress plugin before 1.0.5 does not have CSRF check when saving its settings, and does not sanitise as well as escape them, allowing attackers to make…
Affected: before 1.0.5
Showing 3