CVE-2021-37597

CRITICAL

WP Cerber < 8.9.3 - Multi-Factor Authentication Bypass via wordpress_logged_in_[hash] Manipulation

Title source: llm

WP Cerber before 8.9.3 allows MFA bypass via wordpress_logged_in_[hash] manipulation.

Core 2

Core References

Third Party Advisory x_refsource_misc

Exploit, Third Party Advisory x_refsource_misc

CVSS v3 9.8

EPSS 0.0212

EPSS Percentile 79.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-287

Status published

Products (1)

wpcerber/wp_cerber < 8.9.3

Published Aug 19, 2021

Tracked Since Feb 18, 2026