Skip to content
Threat Feed
Subscribe

Product

Two Factor Authentication (< 1.17.0)

1 brief RSS
high advisory

WordPress: Two Factor Authentication and AIOS MFA bypass (CVE-2026-111739)

A session hijacking vulnerability in Two Factor Authentication and All-In-One Security (AIOS) WordPress plugins allows attackers to bypass MFA by providing their own valid 2FA code during a victim's login process.

Two Factor Authentication +1 web-application authentication-bypass wordpress
1t 1c