Lmsdoctor 2 Factor Authentication — known CVE vulnerabilities

Every CVE whose affected-product data names Lmsdoctor 2 Factor Authentication, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2022-28986 — CVSS 7.5 (high): LMS Doctor Simple 2 Factor Authentication Plugin For Moodle Affected: 2021072900 has an Insecure direct object references (IDOR)…
• CVE-2022-28601 — CVSS 6.5 (medium): A Two-Factor Authentication (2FA) bypass vulnerability in "Simple 2FA Plugin for Moodle" by LMS Doctor allows remote attackers to overwrite…