CVE-2021-37597

WP Cerber before 8.9.3 allows MFA bypass via wordpress_logged_in_[hash] manipulation.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2021-08-19

Last modified

2024-08-04

Weaknesses

CWE-287

Affected products

• Wp Cerber (Wpcerber)

References

• https://github.com/fireeye/Vulnerability-Disclosures
• https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2021-0023/FEYE-2021-0023.md