CVE-2022-2891 | WP 2FA Plugin up to 2.2.x on WordPress Authentication Code timing discrepancy (EUVD-2022-35120)

A vulnerability identified as problematic has been detected in WP 2FA Plugin up to 2.2.x on WordPress. Affected by this issue is some unknown functionality of the component Authentication Code Handler. Performing a manipulation results in observable timing discrepancy.

This vulnerability is reported as CVE-2022-2891. The attacker must have access to the local network to execute the attack. No exploit exists.

You should upgrade the affected component.