The Authenticator Project maintains a niche authentication application with a narrowly scoped vulnerability footprint, where observed disclosures relate to general implementation issues rather than a specific structural weakness class. Treat this as a focused product profile; live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Authenticator Project over time
Signals from CVEs in this vendor scope (2 CVEs).
2 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2024-45394HIGH Authenticator is a browser extension that generates two-step verification codes. In versions 7.0.0 and below, encryption keys for user data were stored encrypted at-rest using only | Sep 3, 2024 | 7.8 | 23 | NO | NO |
CVE-2022-3994MEDIUM The Authenticator WordPress plugin before 1.3.1 does not prevent subscribers from updating a site's feed access token, which may deny other users access to the functionality in cer | Jan 2, 2023 | 4.3 | 18 | NO | NO |
Signals from CVEs in this vendor scope (2 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Authenticator Project.
Media articles that mention a CVE ID that affects a product developed by Authenticator Project — matched by CVE ID, not by vendor name.