Simbahosting Two-factor-authentication vulnerabilities

• simbahosting two-factor-authentication The two-factor-authentication plugin before 1.1.10 for WordPress has XSS in the admin area. CVE-2015-9355 6.1 MediumAugust 28, 2019
• simbahosting two-factor-authentication Cross Site Request Forgery (CSRF) in the two-factor-authentication plugin before 1.3.13 for... CVE-2018-20231 8.8 HighDecember 19, 2018