W2
Product
WP 2FA
7
CVEs
0
On KEV
7.5
Max CVSS
2
New 30D
Severity mix
Critical 0High 3Medium 3Low 1
Watch
Add WP 2FA to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-103514 | 7.5 | Oct 3 | WP 2FA < 4.1.0 - Two-Factor Authentication Bypass via TOTP Code Replay Affected: before 4.1.0 |
| CVE-2026-15372 | 7.5 | Aug 5 | WP 2FA < 4.1.0 - Two-Factor Authentication Bypass via Passkeys Provider Affected: before 4.1.0 |
| CVE-2022-44587 | 7.5 | Jun 21 | WordPress WP 2FA plugin <= 2.6.3 - Sensitive Data Exposure via Log File vulnerability Affected: through 2.6.3 |
| CVE-2026-12988 | 6.4 | Jul 14 | WP 2FA < 3.1.1.2 - Account Takeover via 2FA Setup Email Binding Affected: before 3.1.1.2 |
| CVE-2025-12628 | 6.3 | Nov 24 | WP 2FA < 3.0.0 - Second Factor Bypass Affected: before 3.0.0 |
| CVE-2022-2891 | 5.9 | Oct 10 | WP 2FA < 2.3.0 - Time-Based Side-Channel Attack Affected: before 2.3.0 |
| CVE-2026-108066 | 2.7 | Oct 14 | WP 2FA < 4.2.0 - Admin+ Arbitrary User 2FA Removal via IDOR Affected: before 4.2.0 |
Showing 7