124 matches found
WordPress Limit Login Attempts Security plugin < 3.4.1 - Two-Factor Authentication Bypass vulnerability
Two-Factor Authentication Bypass vulnerability discovered by Qi Qin in WordPress Plugin Limit Login Attempts Reloaded versions 3.4.1...
WordPress Limit Login Attempts Security plugin < 3.4.1 - Two-Factor Authentication Bypass vulnerability
Two-Factor Authentication Bypass vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Limit Login Attempts Reloaded versions 3.4.1...
CVE-2026-118201
The Limit Login Attempts Security WordPress plugin (versions
CVE-2026-118202 Limit Login Attempts Reloaded < 3.4.1 - Two-Factor Authentication Bypass via Malformed X-Forwarded-For Header
The Limit Login Attempts Security WordPress plugin before 3.4.1 does not confirm that its two-factor authentication step succeeded before completing a login and treats a failure to build that step as success, so an attacker who holds a protected user's password can bypass the second factor by...
CVE-2026-118202
The Limit Login Attempts Security WordPress plugin (versions prior to 3.4.1 ) is vulnerable to a Two-Factor Authentication (2FA) bypass . The root cause is that the plugin fails to verify the success of the 2FA step before completing a login and incorrectly treats a failure to build that step as ...
CVE-2026-118201 Limit Login Attempts Reloaded 3.0.0 - 3.4.0 - Two-Factor Authentication Bypass via XML-RPC
The Limit Login Attempts Security WordPress plugin before 3.4.1 does not enforce its two-factor authentication on every password-authentication route, so an attacker who already knows a protected user's password can authenticate through an alternative login interface and obtain that user's access...
CVE-2026-118201 Limit Login Attempts Reloaded 3.0.0 - 3.4.0 - Two-Factor Authentication Bypass via XML-RPC
The Limit Login Attempts Security WordPress plugin before 3.4.1 does not enforce its two-factor authentication on every password-authentication route, so an attacker who already knows a protected user's password can authenticate through an alternative login interface and obtain that user's access...
CVE-2026-118202 Limit Login Attempts Reloaded < 3.4.1 - Two-Factor Authentication Bypass via Malformed X-Forwarded-For Header
The Limit Login Attempts Security WordPress plugin before 3.4.1 does not confirm that its two-factor authentication step succeeded before completing a login and treats a failure to build that step as success, so an attacker who holds a protected user's password can bypass the second factor by...
CVE-2026-117545
IBM webMethods Integration Server 12.1 is vulnerable to a security bypass involving the two-factor authentication mechanism . Due to improper authentication (CWE-287), a remote authenticated attacker could bypass security restrictions. This vulnerability has a CVSS base score of 8.8, indicating h...
CVE-2026-117545 IBM webMethods Integration Server is vulnerable of bypassing the two-factor authentication mechanism.
IBM webMethods Integration Server 12.1 could allow a remote authenticated attacker to bypass security restrictions due to improper authentication...
CVE-2026-123297
In JetBrains Hub before 2026.2.52519 two-factor authentication bypass was possible via the password reset flow...
CVE-2026-123297
In JetBrains Hub versions prior to 2026.2.52519 , a two-factor authentication (2FA) bypass was possible through the password reset flow . This vulnerability is categorized under CWE-304 (Missing Critical Step in Authentication). The impact includes a high degree of risk to confidentiality and int...
EUVD-2026-118062
In JetBrains Hub before 2026.2.52519 two-factor authentication bypass was possible via the password reset flow...
CVE-2026-123297
In JetBrains Hub before 2026.2.52519 two-factor authentication bypass was possible via the password reset flow...
CVE-2026-123297: JetBrains Hub: In JetBrains Hub before 2026.2.52519 two-factor authentication bypass was possible via the password reset flow
In JetBrains Hub before 2026.2.52519 two-factor authentication bypass was possible via the password reset flow...
Security Bulletin: IBM webMethods Integration Server is vulnerable of bypassing the two-factor authentication mechanism. CVE-2026-117545
Summary IBM webMethods Integration Server is vulnerable of bypassing the two-factor authentication mechanism. CVE-2026-117545 Vulnerability Details ID: CVE-2026-117545 DESCRIPTION: IBM webMethods Integration on prem could allow a remote authenticated attacker to bypass security restrictions due t...
CVE-2026-77799
ManageEngine Key Manager Plus versions before 7150 are vulnerable to a Two-Factor Authentication bypass that allows attackers with valid credentials to log in without a verification code...
CVE-2026-77799
ManageEngine Key Manager Plus versions before 7150 are vulnerable to a Two-Factor Authentication bypass . This flaw allows an attacker with valid credentials to log in successfully without providing a required verification code. This vulnerability is associated with CWE-288 (Authentication Bypass...
CVE-2026-77799 Two-factor authentication bypass
ManageEngine Key Manager Plus versions before 7150 are vulnerable to a Two-Factor Authentication bypass that allows attackers with valid credentials to log in without a verification code...