CVE-2023-6506

The WP 2FA – Two-factor authentication for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.5.0 via the send_backup_codes_email due to missing validation on a user controlled key. This makes it possible for subscriber-level attackers to email arbitrary users on the site.

• CWE-639
• CWE-732
• CWE-732

• https://plugins.trac.wordpress.org/browser/wp-2fa/trunk/includes/classes/Admin/class-setup-wizard.php?rev=2940688#L606Third Party Advisory
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3009922%40wp-2fa&new=3009922%40wp-2fa&sfp_email=&sfph_mail=Patch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/caff9be6-4161-47a0-ba47-6c8fc0c4ab40?source=cveProduct, Third Party Advisory
• https://plugins.trac.wordpress.org/browser/wp-2fa/trunk/includes/classes/Admin/class-setup-wizard.php?rev=2940688#L606Third Party Advisory
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3009922%40wp-2fa&new=3009922%40wp-2fa&sfp_email=&sfph_mail=Patch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/caff9be6-4161-47a0-ba47-6c8fc0c4ab40?source=cveProduct, Third Party Advisory

Published

Jan 11, 2024

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-6500The Shariff Wrapper plugin for WordPress is vulnerable to St…5.4
• CVE-2023-6501The Splashscreen WordPress plugin through 0.20 does not have…4.3
• CVE-2023-6502A Denial of Service (DoS) condition has been discovered in G…6.5
• CVE-2023-6503The WP Plugin Lister WordPress plugin through 2.1.0 does not…5.4
• CVE-2023-6504The User Profile Builder – Beautiful User Registration Forms…4.3
• CVE-2023-6505The Migrate WordPress Website & Backups WordPress plugin bef…7.5
• CVE-2023-6507An issue was found in CPython 3.12.0 `subprocess` module on …4.9
• CVE-2023-6508Use after free in Media Stream in Google Chrome prior to 120…8.8
• CVE-2023-6509Use after free in Side Panel Search in Google Chrome prior t…8.8
• CVE-2023-6510Use after free in Media Capture in Google Chrome prior to 12…8.8
• CVE-2023-6511Inappropriate implementation in Autofill in Google Chrome pr…4.3
• CVE-2023-6512Inappropriate implementation in Web Browser UI in Google Chr…6.5