Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:two_factor_authentication_project:two_factor_authentication:*:*:*:*:*:wordpress:*:*

1 brief RSS
high advisory

WordPress: Two Factor Authentication and AIOS MFA bypass (CVE-2026-111739)

A session hijacking vulnerability in Two Factor Authentication and All-In-One Security (AIOS) WordPress plugins allows attackers to bypass MFA by providing their own valid 2FA code during a victim's login process.

Two Factor Authentication +1 web-application authentication-bypass wordpress
1t 1c