Known Vulnerabilities for Two Factor by WordPress.org
Listed below are 10 of the newest known vulnerabilities associated with "Two Factor" by "WordPress.org".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-103655 json | MISP contains a vulnerability in its two-factor authentication (TOTP) verification process that permits a valid one-time code... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-103651 json | MISP contains a vulnerability in its one-time password (OTP) authentication flow that allows replay of a consumed HOTP (paper... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-103283 json | Ghost versions 6.20.0 before 6.57.1 contain a session handling vulnerability that allows authenticated staff users to log in ... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-102121 json | A form-rendering interface in the Advanced Forms component is reachable without authentication so that published forms can be... | Not Provided | 2026-09-30 | 2026-10-01 |
| CVE-2026-100712 json | froxlor through 2.3.10 disables a user's two-factor authentication immediately upon an unauthenticated-triggerable GET reques... | Not Provided | 2026-09-26 | 2026-09-28 |
| CVE-2026-100709 json | Froxlor through 2.3.10 stores only a numeric user ID in remembered-2FA tokens (panel_2fa_tokens) without recording the accoun... | Not Provided | 2026-09-26 | 2026-09-26 |
| CVE-2026-100667 json | grav-plugin-login (the Grav CMS Login plugin) versions >= 3.8.7 and < 3.9.7 allow the two-factor authentication challenge to ... | Not Provided | 2026-09-26 | 2026-09-28 |
| CVE-2026-100508 json | Unauthenticated Denial of Service Attack in Two Factor <= 0.16.0 versions. | Not Provided | 2026-09-30 | 2026-09-30 |
| CVE-2026-97969 json | In the Linux kernel, the following vulnerability has been resolved: watchdog: msc313e: Fix clock leak and spurious timer in ... | Not Provided | 2026-09-25 | 2026-09-25 |
| CVE-2026-96445 json | A flaw was found in the Conditional OTP authenticator of Keycloak, an identity and access management solution. The issue occu... | Not Provided | 2026-09-23 | 2026-09-23 |