Skip to content
Threat Feed
Subscribe

Vendor

Limit Login Attempts Reloaded

1 brief RSS
high advisory

Limit Login Attempts Security: Two-factor authentication bypass (CVE-2026-118201)

The Limit Login Attempts Security WordPress plugin fails to enforce two-factor authentication (2FA) across all authentication routes, allowing attackers with known passwords to bypass MFA via alternative login interfaces.

Limit Login Attempts Security
1t 1c