CyberSecBulletin

Two Factor Authentication vulnerabilities

We track 1 vulnerability in Two Factor Authentication products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 29, 2026.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest Two Factor Authentication vulnerabilities

  • 7.5 High severity

    Two Factor Authentication: Improper Authentication

    CVE-2026-111739Two Factor Authentication

    The Two Factor Authentication WordPress plugin before 1.17.0, All-In-One Security (AIOS) WordPress plugin before 5.5.0 do not bind the account whose two-factor code is verified to the account being authenticated, allowing an attacker who knows a victim's passw