WP 2fa vulnerabilities

2 known vulnerabilities in WP 2fa from Melapress. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  WP 2FA: Cross-Site Request Forgery

  CVE-2026-62142Oct 8, 2026Melapress

  Cross-Site Request Forgery (CSRF) vulnerability in Melapress WP 2FA wp-2fa allows Cross Site Request Forgery.This issue affects WP 2FA: from n/a through 4.1.0.

• 7.5 High severity

  WP 2FA: Insertion of Sensitive Information into Log File

  CVE-2022-44587Jun 21, 2024WP 2FA

  Insertion of Sensitive Information into Log File vulnerability in WP 2FA allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP 2FA: from n/a through 2.6.3.