Login Request a demo
W2
Product
WP 2FA
by Melapress · last CVE Oct 8, 2026
5
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 2Medium 3Low 0
Severity
All severities5Critical0High2Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add WP 2FA to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-62142
8.8
0%
Oct 8
WordPress WP 2FA plugin <= 4.1.0 - Cross Site Request Forgery (CSRF) vulnerability
Affected: through 4.1.0
CVE-2022-44587
7.5
0%
Jun 21
Insertion of Sensitive Information into Log File vulnerability in WP 2FA allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP 2FA: from n/a…
Affected: before 2.6.4
CVE-2024-32568
6.1
0%
Apr 18
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP 2FA wp-2fa.This issue affects WP 2FA: from n/a through <= 2.6.2
Affected: before 2.6.3
CVE-2022-44595
5.3
0%
Mar 21
Improper Authentication vulnerability in Melapress WP 2FA allows Authentication Bypass.This issue affects WP 2FA: from n/a through 2.2.0
Affected: through 2.2.0
CVE-2023-6520
4.3
0%
Jan 11
The WP 2FA – Two-factor authentication for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.5.0
Affected: before 2.6.0
Showing 5