CVE-2022-44587

—

CVSS 3.1

7.5 high

EPSS

<1%p37

Published

Jun 21, 2024 (Jun 21, 2024)

Modified

Jun 17, 2026

Description

Insertion of Sensitive Information into Log File vulnerability in WP 2FA allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP 2FA: from n/a through 2.6.3.

Vendors: melapress
Products: wp 2fa
Ecosystems: WordPress
Weakness: CWE-532
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.