Skip to content
Threat Feed
Subscribe

Vendor

Limit Login Attempts Security

1 brief RSS
high advisory

Limit Login Attempts Security: Two-factor authentication bypass (CVE-2026-118202)

The Limit Login Attempts Security WordPress plugin before version 3.4.1 allows an attacker with a valid password to bypass 2FA by manipulating request headers.

Limit Login Attempts Security wordpress authentication-bypass cve-2026-118202
1t 1c