Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
WordPress Plugin Google Authenticator-Per User Prompt Timing Attack - Vulnerability Database
WP Plugin Google Authenticator Per User Prompt

WordPress Plugin Google Authenticator-Per User Prompt Timing Attack

Medium
Reference: No Reference
Title: WordPress Plugin Google Authenticator-Per User Prompt Timing Attack
Overview:

WordPress Plugin Google Authenticator-Per User Prompt is prone to a timing attack vulnerability because of an implementation flaw in how the application validates the password for a user account. Exploiting this issue may allow attackers to brute force an application password and gain access to the account. WordPress Plugin Google Authenticator-Per User Prompt version 0.6 is vulnerable prior versions may also be affected.