Description (CNA)
Really Simple Security plugin for WordPress before 9.8.2 contains a missing authorization check vulnerability that allows authenticated low-privileged attackers to bypass enforced two-factor authentication indefinitely by exploiting an unguarded code path in the profile-page update handler. Attackers can submit a crafted POST request without the two-factor-authentication field to skip nonce verification and trigger delete_two_fa_meta(), which resets the grace period anchor timestamp on every login cycle, causing mandatory 2FA enforcement to be deferred indefinitely.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| reallysimpleplugins / Really Simple Security | affected 0 before 9.8.2 |
CWE
CWE-862
References
- https://wordpress.org/plugins/really-simple-ssl/#developers
- https://www.vulncheck.com/advisories/really-simple-security-authorization-bypass-via-profile-page-update-handler
ADP enrichment
No English description supplied.
No references supplied.