Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-06-17
Wp 2fa With Telegram - Authentication Bypass (CVE-2024-9820)
The WP 2FA with Telegram plugin for WordPress is vulnerable to Two-Factor Authentication Bypass in versions up to, and including, 3.0. This is due to the two-factor code being stored in a cookie, which makes it possible to bypass two-factor authentication.
PLUGIN
Wp 2fa With Telegram
CVE-2024-9820
Risk Score
Threat Entry
Updated 2026-06-17
Wp 2fa With Telegram - Authentication Bypass (CVE-2024-9687)
The WP 2FA with Telegram plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 3.0. This is due to insufficient validation of the user-controlled key on the 'validate_tg' action. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to log in as any existing user on the site, such as an administrator.
PLUGIN
Wp 2fa With Telegram
CVE-2024-9687
Risk Score