Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:limit_login_attempts_reloaded:limit_login_attempts_security:*:*:*:*:*:wordpress:*:*

2 briefs RSS
high advisory

Limit Login Attempts Security: Two-factor authentication bypass (CVE-2026-118202)

The Limit Login Attempts Security WordPress plugin before version 3.4.1 allows an attacker with a valid password to bypass 2FA by manipulating request headers.

Limit Login Attempts Security wordpress authentication-bypass cve-2026-118202
1t 1c
high advisory

Limit Login Attempts Security: Two-factor authentication bypass (CVE-2026-118201)

The Limit Login Attempts Security WordPress plugin fails to enforce two-factor authentication (2FA) across all authentication routes, allowing attackers with known passwords to bypass MFA via alternative login interfaces.

Limit Login Attempts Security
1t 1c