https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-07T12:52:24.882762+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-103514 CVE-2026-103514 — WP 2FA < 4.1.0 - Two-Factor Authentication Bypass via TOTP Code Replay 2026-10-07T12:52:24.885072+00:00

Affected: Unknown WP 2FA

The WP 2FA WordPress plugin before 4.1.0 does not invalidate a time-based one-time passcode once it has been used, allowing an attacker who knows an account's password and has observed a valid code within its validity window to replay it and bypass two-factor authentication, including on administrator accounts.