W2
Product
WP 2FA
by · last CVE Oct 14, 2026
7
CVEs
0
On KEV
7.5
Max CVSS
2
New 30D
Severity mix
Critical 0High 3Medium 3Low 1
Watch

Add WP 2FA to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-103514
7.5
0%
Oct 3
WP 2FA < 4.1.0 - Two-Factor Authentication Bypass via TOTP Code Replay
Affected: before 4.1.0
CVE-2026-15372
7.5
1%
Aug 5
WP 2FA < 4.1.0 - Two-Factor Authentication Bypass via Passkeys Provider
Affected: before 4.1.0
CVE-2022-44587
7.5
0%
Jun 21
WordPress WP 2FA plugin <= 2.6.3 - Sensitive Data Exposure via Log File vulnerability
Affected: through 2.6.3
Showing 3