Moodle · Lms Doctor Simple 2 Factor Authentication Plugin · CVE-2022-28986
**Name of the Vulnerable Software and Affected Versions**
LMS Doctor Simple 2 Factor Authentication Plugin For Moodle version 2021072900
**Description**
The issue allows remote attackers to update sensitive records, such as email, password, and phone number, of other user accounts due to an Insecure Direct Object References (IDOR) vulnerability.
**Recommendations**
For version 2021072900, at the moment, there is no information about a newer version that contains a fix for this vulnerability.