Unknown Wp 2fa vulnerabilities

• unknown wp 2fa WP 2FA < 4.2.0 - Admin+ Arbitrary User 2FA Removal via IDOR CVE-2026-108066 2.7 LowOctober 14, 2026
• melapress wp 2fa WordPress WP 2FA plugin <= 4.1.0 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-62142 8.8 HighOctober 8, 2026
• unknown wp 2fa WP 2FA < 4.1.0 - Two-Factor Authentication Bypass via TOTP Code Replay CVE-2026-103514 7.5 HighOctober 3, 2026
• unknown wp 2fa WP 2FA < 4.1.0 - Two-Factor Authentication Bypass via Passkeys Provider CVE-2026-15372 7.5 HighAugust 5, 2026
• unknown wp 2fa WP 2FA < 3.1.1.2 - Account Takeover via 2FA Setup Email Binding CVE-2026-12988 6.4 MediumJuly 14, 2026
• unknown wp 2fa WP 2FA < 3.0.0 - Second Factor Bypass CVE-2025-12628 6.3 MediumNovember 24, 2025
• melapress wp 2fa WordPress WP 2FA plugin <= 2.6.2 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-32568 7.1 HighApril 18, 2024
• melapress wp 2fa WordPress WP2FA plugin <= 2.2.0 - Broken Authentication vulnerability CVE-2022-44595 5.3 MediumMarch 21, 2024
• unknown wp 2fa WP 2FA < 2.3.0 - Time-Based Side-Channel Attack CVE-2022-2891 5.9 MediumOctober 10, 2022
• wpwhitesecurity wp 2fa, melapress wp 2fa – two-factor authentication for wordpress +1 more WP 2FA < 2.2.1 - Reflected Cross-Site Scripting CVE-2022-1527 6.1 MediumMay 30, 2022