Vulnerabilities > Simbahosting > TWO Factor Authentication > 1.3.6

DATE CVE VULNERABILITY TITLE RISK
2018-12-19 CVE-2018-20231 Cross-Site Request Forgery (CSRF) vulnerability in Simbahosting Two-Factor-Authentication
Cross Site Request Forgery (CSRF) in the two-factor-authentication plugin before 1.3.13 for WordPress allows remote attackers to disable 2FA via the tfa_enable_tfa parameter due to missing nonce validation.
network
low complexity
simbahosting CWE-352
8.8
8.8