Description Insufficient state checks lead to a vector that allows to bypass 2FA checks. Remediation References CVE-2025-25227 Related Vulnerabilities WordPress Plugin simpleSAMLphp Authentication Cross-Site Scripting (0.7.0) WordPress Plugin Quiz and Survey Master (QSM)-Easy Quiz and Survey Maker Cross-Site Scripting (7.1.13) Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-2472) Envoy Proxy Uncontrolled Resource Consumption Vulnerability (CVE-2019-15226) MySQL CVE-2019-2924 Vulnerability (CVE-2019-2924) Severity High Classification CVE-2025-25227 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Tags Missing Update Known Vulnerabilities