What are the most common weakness types in born05 CraftCMS Plugin - Two-Factor Authentication CVEs?

born05 CraftCMS Plugin - Two-Factor Authentication's CVEs most often map to these CWE weakness types: CWE-303 (Incorrect Implementation of Authentication Algorithm), CWE-499 (Serializable Class Containing Sensitive Data).

born05 CraftCMS Plugin - Two-Factor Authentication Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: born05 CraftCMS Plugin - Two-Factor Authentication vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

born05 CraftCMS Plugin - Two-Factor Authentication Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

born05 CraftCMS Plugin - Two-Factor Authentication has 2 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 2 have a known public exploit. The average CVSS base score across scored CVEs is 7.3.

Severity and exploitation

How the CVSS severity of born05 CraftCMS Plugin - Two-Factor Authentication's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High1

Medium1

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of born05 CraftCMS Plugin - Two-Factor Authentication's CVEs are currently listed in CISA's KEV catalog.

Public exploits

2 of born05 CraftCMS Plugin - Two-Factor Authentication's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every born05 CraftCMS Plugin - Two-Factor Authentication version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

<= 3.3.31 CVE
3.3.1 <= v <= 3.3.31 CVE

Find a version

2 CVEs

Sort

CraftCMS Plugin - Two-Factor Authentication - TOTP Token Stays Valid After Use
CVE-2024-5658
Public exploit
Patch
CWE-303
Medium · CVSS 6.5
EPSS 0.6% (47th pct)2024-06-06
CraftCMS Plugin - Two-Factor Authentication - Password Hash Disclosure
CVE-2024-5657
Public exploit
Patch
CWE-499
High · CVSS 8.1
EPSS 0.8% (57th pct)2024-06-06

Common weakness types

The CWE weakness categories most often found in born05 CraftCMS Plugin - Two-Factor Authentication CVEs. Follow any weakness for its full explanation.

Other born05 products

Browse vulnerabilities for other products by born05.

born05/craft-twofactorauthentication2 CVEs craft-twofactorauthentication2 CVEs two-factor authentication2 CVEs craft_cms1 CVEs

All born05 vulnerabilities

Frequently asked questions

Common questions about born05 CraftCMS Plugin - Two-Factor Authentication vulnerabilities.

How many CVEs does born05 CraftCMS Plugin - Two-Factor Authentication have?: born05 CraftCMS Plugin - Two-Factor Authentication has 2 published CVE records since 2024.
How many born05 CraftCMS Plugin - Two-Factor Authentication CVEs are in CISA KEV?: None of born05 CraftCMS Plugin - Two-Factor Authentication's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for born05 CraftCMS Plugin - Two-Factor Authentication vulnerabilities?: Yes — 2 of born05 CraftCMS Plugin - Two-Factor Authentication's CVEs have a known public exploit.
Which versions of born05 CraftCMS Plugin - Two-Factor Authentication are affected?: 2 distinct born05 CraftCMS Plugin - Two-Factor Authentication versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in born05 CraftCMS Plugin - Two-Factor Authentication CVEs?: born05 CraftCMS Plugin - Two-Factor Authentication's CVEs most often map to these CWE weakness types: CWE-303 (Incorrect Implementation of Authentication Algorithm), CWE-499 (Serializable Class Containing Sensitive Data).
What is the average severity of born05 CraftCMS Plugin - Two-Factor Authentication CVEs?: The average CVSS base score across born05 CraftCMS Plugin - Two-Factor Authentication's scored CVEs is 7.3.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track born05 CraftCMS Plugin - Two-Factor Authentication vulnerabilities

Get an alert for each new born05 CraftCMS Plugin - Two-Factor Authentication CVE, with AI-written analysis and remediation steps.

Create an account See pricing