Skip to content
Threat Feed

Product

Login With OTP Plugin

1 brief RSS
critical threat

CVE-2026-8760: WordPress Login with OTP Plugin Authentication Bypass

The Login with OTP plugin for WordPress is vulnerable to authentication bypass due to an incomplete fix for CVE-2024-11178, allowing unauthenticated attackers to brute-force OTP codes and gain administrative access.

Login with OTP plugin wordpress authentication-bypass cve-2026-8760 brute-force
2r 1t 2c