Keyy Two Factor Authentication (like Clef) vulnerabilities

1 known vulnerability in Keyy Two Factor Authentication (like Clef) from Nexist. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Keyy Two Factor Authentication (like Clef): Improper Authentication

  CVE-2025-10293Oct 15, 2025Nexist

  The Keyy Two Factor Authentication (like Clef) plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.2.3. This is due to the plugin not properly validating a user's identity associated with a to