CyberSecBulletin

Mobisoft974 vulnerabilities

We track 1 vulnerability in Mobisoft974 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 12, 2024.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest Mobisoft974 vulnerabilities

  • 9.8 Critical severity

    Relais 2FA: Authentication Bypass Using an Alternate Path or Channel

    CVE-2024-10245Mobisoft974EPSS 1.2%

    The Relais 2FA plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.0. This is due to incorrect authentication and capability checking in the 'rl_do_ajax' function. This makes it possible for unauthenticated attackers