Description
WordPress Plugin Two Factor Authentication is prone to a cross-site request forgery vulnerability. Exploiting this issue may allow a remote attacker to perform certain administrative actions and gain unauthorized access to the affected application; other attacks are also possible. WordPress Plugin Two Factor Authentication version 1.3.12 is vulnerable; prior versions are also affected.
Remediation
Update to plugin version 1.3.13 or latest
References
Related Vulnerabilities
WordPress Plugin SAML SP Single Sign On-SSO login Cross-Site Scripting (4.8.83)
WordPress Plugin Xerte Online 'save.php' Arbitrary File Upload (0.32)
WordPress Plugin All In One WP Security & Firewall Cross-Site Scripting (4.2.1)
WordPress Plugin YOP Poll Multiple Cross-Site Scripting Vulnerabilities (4.9.1)