CVE-2026-111739

The Two Factor Authentication WordPress plugin (before version 1.17.0 ) and the All-In-One Security (AIOS) WordPress plugin (before version 5.5.0 ) contain a 2FA bypass vulnerability. The root cause is a failure to bind the account providing the verified two-factor code to the specific account be...