Solid Security – Password, Two Factor Authentication, and Brute Force Protection, CVE-2020-36176

CVE, Research URL: CVE-2020-36176
Home page URL: Security reports for Solid Security – Password, Two Factor Authentication, and Brute Force Protection
Application: Solid Security – Password, Two Factor Authentication, and Brute Force Protection
Published on: Jan 06, 2021
Research Description: The iThemes Security (formerly Better WP Security) plugin before 7.7.0 for WordPress does not enforce a new-password requirement for an existing account until the second login occurs.
Affected versions: Min -, max 7.7.0.
Status: vulnerable