CyberSecBulletin

Dueclic vulnerabilities

We track 2 vulnerabilities in Dueclic products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 15, 2024.

2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score

Latest Dueclic vulnerabilities

  • 7.5 High severity

    AuthPress: Reliance on Cookies without Validation and Integrity Checking

    CVE-2024-9820Dueclic

    The WP 2FA with Telegram plugin for WordPress is vulnerable to Two-Factor Authentication Bypass in versions up to, and including, 3.0. This is due to the two-factor code being stored in a cookie, which makes it possible to bypass two-factor authentication.

  • 8.8 High severity

    AuthPress: Authorization Bypass Through User-Controlled Key

    CVE-2024-9687Dueclic

    The WP 2FA with Telegram plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 3.0. This is due to insufficient validation of the user-controlled key on the 'validate_tg' action. This makes it possible for authenticated