Authenticator is a niche authentication product whose disclosures center on cryptographic implementation weaknesses, including inadequate encryption strength, reliance on broken or risky cryptographic algorithms, and weak password encoding practices. These patterns reflect the core challenge of secure credential storage and transport in authentication systems; live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Authenticator over time
Signals from CVEs in this vendor scope (2 CVEs).
2 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2024-45394HIGH Authenticator is a browser extension that generates two-step verification codes. In versions 7.0.0 and below, encryption keys for user data were stored encrypted at-rest using only | Sep 3, 2024 | 7.8 | 23 | NO | NO |
CVE-2022-3994MEDIUM The Authenticator WordPress plugin before 1.3.1 does not prevent subscribers from updating a site's feed access token, which may deny other users access to the functionality in cer | Jan 2, 2023 | 4.3 | 18 | NO | NO |
Signals from CVEs in this vendor scope (2 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Authenticator.
Media articles that mention a CVE ID that affects a product developed by Authenticator — matched by CVE ID, not by vendor name.