CVE-2022-44587: Melapress Wp 2fa

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Insertion of Sensitive Information into Log File vulnerability in WP 2FA allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP 2FA: from n/a through 2.6.3.

Affected products

• Melapress Wp 2fa: before 2.6.4 (fixed in 2.6.4)

Published 2024-06-21. Last modified 2026-06-17.