CVE-2026-118201

The Limit Login Attempts Security WordPress plugin, in versions 3.0.0 through 3.4.0 , contains a vulnerability where two-factor authentication (2FA) is not enforced across all password-authentication routes. An attacker who possesses a protected user's password can bypass the 2FA requirement by a...