W2
Product
WP 2FA
by · last CVE Oct 14, 2026
7
CVEs
0
On KEV
7.5
Max CVSS
2
New 30D
Severity mix
Critical 0High 3Medium 3Low 1
Watch

Add WP 2FA to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-12988
6.4
0%
Jul 14
WP 2FA < 3.1.1.2 - Account Takeover via 2FA Setup Email Binding
Affected: before 3.1.1.2
CVE-2025-12628
6.3
0%
Nov 24
WP 2FA < 3.0.0 - Second Factor Bypass
Affected: before 3.0.0
CVE-2022-2891
5.9
1%
Oct 10
WP 2FA < 2.3.0 - Time-Based Side-Channel Attack
Affected: before 2.3.0
Showing 3