CVE-2026-15372 in WP 2FA Plugin
요약
\~에 의해 MITRE • 2026. 08. 05.
The WP 2FA WordPress plugin before 4.1.0 does not validate the second authentication factor when one of its supported methods is selected at login, allowing an attacker who already knows a user's password to bypass two-factor authentication and fully access the account, including administrator accounts.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.