Beveiligingsadvies

CVE-2026-103514

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-10-03 06:00:25

Laatst bijgewerkt 2026-10-03 15:12:22

Toegewezen door WPScan

CVSS-score 7.5

Status PUBLISHED

Beschrijving

The WP 2FA WordPress plugin before 4.1.0 does not invalidate a time-based one-time passcode once it has been used, allowing an attacker who knows an account's password and has observed a valid code within its validity window to replay it and bypass two-factor authentication, including on administrator accounts.

← Alle CVE's bekijken Bekijk op cve.org ↗