Vulnerabilities / Two Factor Authentication
Two Factor Authentication vulnerabilities
Advisories WPSec published for Two Factor Authentication. Other sources may list more. Its attack surface: Two Factor Authentication on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-27 | WPSEC-2026-1740 | Two Factor Authentication <= 1.16.0 - Authenticated (Subscriber+) Authentication Bypass via 'creds_user_id' Parameter | Medium 6.8 | 1.17.0 |
| 2026-10-27 | WPSEC-2026-1739 | Two Factor Authentication <= 1.16.0 - Unauthenticated Authentication Bypass via WooCommerce Password Reset | High 7.4 | 1.17.0 |
License: CC BY 4.0