Vendor
The Vigilant WordPress plugin before version 2.11.0 fails to enforce two-factor authentication on non-default login forms, allowing credentialed attackers to bypass 2FA.