Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
WordPress Plugin Duo Two-Factor Authentication Security Bypass - Vulnerability Database
WP Plugin Duo Wordpress

WordPress Plugin Duo Two-Factor Authentication Security Bypass

Critical
Reference: No Reference
Title: WordPress Plugin Duo Two-Factor Authentication Security Bypass
Overview:

WordPress Plugin Duo Two-Factor Authentication is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and gain unauthorized access to the affected application. The vulnerability exists only in multi-site deployments scenario with the plugin disabled globally and enabled on a site-by-site basis. WordPress Plugin Duo Two-Factor Authentication version 1.8.1 is vulnerable prior versions are also affected.