Known vulnerabilities in the Google Authenticator plugin
7 security advisories have been published for the Google Authenticator plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Google Authenticator - Cross-Site Request Forgery (CSRF) (CVE-2026-14204) MEDIUM
- Google Authenticator - Information Disclosure (CVE-2022-44589) HIGH
- Google Authenticator - Broken Access Control (CVE-2022-4943) HIGH
- Google Authenticator - Broken Access Control (CVE-2022-42461) MEDIUM
- Google Authenticator - Cross-Site Scripting (XSS) (CVE-2022-1321) MEDIUM
- Google Authenticator - Cross-Site Scripting (XSS) (CVE-2022-0875) MEDIUM
- Google Authenticator - Cross-Site Request Forgery (CSRF) (CVE-2022-0229) HIGH