WordPress Plugin Vulnerabilities

WP Cerber Security < 8.9.3 - 2FA Authentication Bypass

Description

The plugin improperly checked certain HTTP parameters leading to an administrative multi-factor authentication bypass.

Affects Plugins

Plugin icon
wp-cerber
Fixed in 8.9.3

References

CVE
CVE-2021-37597
URL
https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2021-0023/FEYE-2021-0023.md

Miscellaneous

Original Researcher
lyass El Hadi, Mandiant
Verified
No
WPVDB ID
f6ea01bf-5cb9-4a06-a5da-c141d562fa53

Timeline

Publicly Published
2021-08-19 (about 4 years ago)
Added
2021-08-19 (about 4 years ago)
Last Updated
2022-03-07 (about 4 years ago)

Other

Published
Title
Published
2019-09-21
Title
DELUCKS SEO <= 2.1.7 - Unauthenticated Options Update
Published
2024-05-28
Title
Swiss Toolkit For WP < 1.0.8 - Contributor+ Authentication Bypass
Published
2016-02-08
Title
WooCommerce - Store Toolkit Plugin <= 1.5.6 - Privilege Escalation
Published
2020-01-27
Title
WPS Hide Login < 1.5.5 - Secret Login Page Disclosure
Published
2014-08-01
Title
Captcha 2.12-3.8.1 - Captcha Bypass