CVE-2023-6506CWE-639

WP 2FA <= 2.5.0 - Insecure Direct Object Reference to Arbitrary Email Sending

Medium · published January 11, 2024

CVSS v3.1
4.3
EPSS
0%
Percentile
39.4
In the wild
Unconfirmed
What it is

The WP 2FA – Two-factor authentication for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.5.0 via the send_backup_codes_email due to missing validation on a user controlled key. This makes it possible for subscriber-level attackers to email arbitrary users on the site.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00467 · 39.4th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2024-01-11T06:49Z
EPSS history
Timeline
  • 11 JAN 06:49Z
    WP 2FA <= 2.5.0 - Insecure Direct Object Reference to Arbitrary Email Sending
    cvelistv5