Melapress Wp 2fa — known CVE vulnerabilities

Every CVE whose affected-product data names Melapress Wp 2fa, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2024-32568 — CVSS 7.1 (high): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP 2FA wp-2fa.This issue…
• CVE-2022-44587 — CVSS 5.3 (medium): Insertion of Sensitive Information into Log File vulnerability in WP 2FA allows Accessing Functionality Not Properly Constrained by…
• CVE-2022-44595 — CVSS 5.3 (medium): Improper Authentication vulnerability in Melapress WP 2FA allows Authentication Bypass.This issue affects WP 2FA: from n/a through 2.2.0.
• CVE-2023-6520 — CVSS 4.3 (medium): The WP 2FA – Two-factor authentication for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up…