Description
Insufficient state checks lead to a vector that allows to bypass 2FA checks.
Remediation
References
Related Vulnerabilities
WordPress Plugin NextScripts:Social Networks Auto-Poster Cross-Site Scripting (3.4.17)
Next.js Use of Cache Containing Sensitive Information Vulnerability (CVE-2025-57752)
WordPress Plugin Flow-Flow Social Stream Unspecified Vulnerability (3.0.71)
MySQL CVE-2024-21160 Vulnerability (CVE-2024-21160)
WordPress Plugin MailPoet Newsletters (Previous) 'swfupload.swf' Cross-Site Scripting (2.1.6)