Login Request a demo
W2
Product
WP 2FA
by Melapress · last CVE Oct 8, 2026
5
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 2Medium 3Low 0
Severity
All severities5Critical0High2Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add WP 2FA to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-62142
8.8
0%
Oct 8
WordPress WP 2FA plugin <= 4.1.0 - Cross Site Request Forgery (CSRF) vulnerability
Affected: through 4.1.0
CVE-2022-44587
7.5
0%
Jun 21
WordPress WP 2FA plugin <= 2.6.3 - Sensitive Data Exposure via Log File vulnerability
Affected: before 2.6.4
CVE-2024-32568
6.1
0%
Apr 18
WordPress WP 2FA plugin <= 2.6.2 - Reflected Cross Site Scripting (XSS) vulnerability
Affected: through 2.6.2
CVE-2022-44595
5.3
0%
Mar 21
WordPress WP2FA plugin <= 2.2.0 - Broken Authentication vulnerability
Affected: through 2.2.0
CVE-2023-6520
4.3
0%
Jan 11
WP 2FA – Two-factor authentication for WordPress <= 2.5.0 - Cross-Site Request Forgery
Affected: before 2.6.0
Showing 5