CVE-2026-77771

CVE-2026-77771 — miniOrange 2FA Free & Pro: セッションスコープのOTPロックアウトによる2FAバイパス WordPress用のminiOrange Two-Factor Authenticationプラグインにおける認証バイパスにより、被害者の有効なパスワードをすでに入手している攻撃者が、第2要素を無制限にブルートフォースでき、2FAを完全に無効化できる。 概要 | ---|--- CVE ID| CVE-2026-77771 脆弱性の種類| 認証バイパス AUTHBYPASS CWE| CWE-287: 不適切な認証 OWASP Top 10...

CVE-2026-7671

CVE-2026-7671 - Tornet Scooter OTP ブルートフォース攻撃 概要 Tornet Scooter モバイルアプリ 4.75（Android版）における過剰な認証試行の不適切な制限（CWE-307）。 詳細 /TwoFactor エンドポイントにはレート制限やロックアウトが実装されていません。 4桁のOTP（0000〜9999）がリモートからブルートフォース攻撃される可能性があります。 タイムライン 2025-10-24: ベンダーに通知 2026-04-08: 公開開示（ベンダーからの応答なし） 2026-05-02: CVE-2026-7671...

CVE-2025-56224

CVE-2025-56224（OTP）検証バイパス 説明 攻撃者は別のユーザーの携帯電話番号になりすまし、この脆弱性を利用してOTPコードを知らなくても番号を検証することができます。 CVSSスコア: 8.1（高） 攻撃タイプ リモート（認証済み） 影響を受けるバージョン 8.6.8以前のバージョン（ 8.6.8） 発見者: Yazan Abu-Nadi...

CVE-2025-4094-POC

WordPress插件Digits OTP绕过 CVE-2025-4094 概述 该脚本是针对WordPress插件Digits（版本 -p -i OPTIONS 参数 -u, --url: 必需 目标URL（例如：https://example.com/wp-admin/admin-ajax.php） -p, --phone: 必需 目标手机号码（仅数字） -i, --instance-id: 必需 从拦截请求中获取的实例ID -d, --digits: 可选 OTP位数（4位或6位，默认为4） -w, --workers: 可选 并行工作线程数（默认为10） --start: 可选...

CVE-2025-4094

CVE-2025-4094 – WordPress Digits プラグイン この方法は、Burp 内で視覚的に確認し、検出しきい値を微調整するのに役立ちます。 拡張スクリプト POCPioneer による Enhanced PoC 参考情報 WPScan 脆弱性エントリ WPVulnDB エントリ 公式プラグインページ CVE ID – CVE-2025-4094...

CVE-2025-10658

Exploit: SupportCandy 게스트 OTP 무차별 대입 → 계정 탈취 1 OTP 로그인 흐름 시작 브라우저 열기: /support/ 게스트/OTP 로그인 선택 대상 이메일 입력 예: [email protected] 제출 2 OTP 폼에서 필요한 값 추출 DevTools → Network → admin-ajax.php?action=wpscauthenticateguestlogin 응답에서: 저장: OTPID NONCE 3 OTP 무차별 대입 !/usr/bin/env python3 import requests,...

Exploit for CVE-2026-77771

CVE-2026-77771 — miniOrange 2FA Free & Pro: 2FA Bypass via S...

CVE-2026-12215

The OTP Login & Register Woocommerce plugin for WordPress is vulnerable to Authentication Bypass via OTP Brute Force in all versions up to, and including, 2.7.2. The vulnerability exists because the OTP rate-limit attempt counter in processotpform is keyed exclusively on the attacker-controlled...

EUVD-2026-75928

The OTP Login & Register Woocommerce plugin for WordPress is vulnerable to Authentication Bypass via OTP Brute Force in all versions up to, and including, 2.7.2. The vulnerability exists because the OTP rate-limit attempt counter in processotpform is keyed exclusively on the attacker-controlled...

PT-2026-89747

The OTP Login & Register Woocommerce plugin for WordPress is vulnerable to Authentication Bypass via OTP Brute Force in all versions up to, and including, 2.7.2. The vulnerability exists because the OTP rate-limit attempt counter in process otp form is keyed exclusively on the attacker-controlled...

CVE-2026-12215: Unrestricted Upload of File with Dangerous Type

The OTP Login & Register Woocommerce plugin for WordPress is vulnerable to Authentication Bypass via OTP Brute Force in all versions up to, and including, 2.7.2. The vulnerability exists because the OTP rate-limit attempt counter in processotpform is keyed exclusively on the attacker-controlled...

EUVD-2026-75264

The miniOrange 2FA WordPress plugin before 6.3.1, miniOrange 2FA WordPress plugin before 19.3 does not scope its second-factor attempt limit to the account being attacked, keying it instead to an identifier the client supplies and can change at will, allowing an attacker who already knows a...

EUVD-2026-70528

A vulnerability in MISP's email-based one-time password OTP authentication flow allowed an attacker to perform an unrestricted number of OTP verification attempts. The emailotp endpoint did not apply brute-force protection when validating submitted OTP values. An attacker who had reached the OTP...

CVE-2026-57867

CVE-2026-57867 affects MicroRealEstate before or up to 1.0.0-alpha3, due to a lack of token state management that enables adversaries to bypass authentication and brute‑force One‑Time Passwords (OTP) to log in as any user. The root cause is insufficient token state handling, leading to an auth by...

CVE-2026-57867: Authentication Bypass Using an Alternate Path or Channel

MicroRealEstate allows adversaries to bypass authentication due to a lack of token state management. This would permit adversaries targeting MicroRealEstate deployments to brute-force One-Time Passwords OTP to log in as any user. This issue affects MicroRealEstate: through 1.0.0-alpha3...

CVE-2026-56450 AIL Framework - Missing Rate Limiting Enables Brute-Force Attacks Against Two-Factor Authentication Codes

AIL did not restrict repeated failed attempts to verify a two-factor authentication OTP code. An attacker who had reached the 2FA verification step, such as after successfully completing the password-authentication stage, could submit an unlimited number of OTP guesses. This could enable...

CVE-2026-8760 Login with OTP <= 1.6 - Unauthenticated Authentication Bypass via OTP Brute Force

The Login with OTP plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.6. This is due to an incomplete fix for CVE-2024-11178: the rate-limit/lockout check added to otplloginaction was placed only inside the OTP-generation branch and is never...

CVE-2026-8760 Login with OTP <= 1.6 - Unauthenticated Authentication Bypass via OTP Brute Force

The Login with OTP plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.6. This is due to an incomplete fix for CVE-2024-11178: the rate-limit/lockout check added to otplloginaction was placed only inside the OTP-generation branch and is never...

CVE-2025-7630 OTP Password Brute Forcing in DorukNet's Wispotter

Improper Restriction of Excessive Authentication Attempts, Improper Authentication vulnerability in Doruk Communication and Automation Industry and Trade Inc. Wispotter allows Password Brute Forcing, Brute Force. This issue affects Wispotter: from 1.0 before v2025.10.08.1...

CVE-2025-14002

The WPCOM Member plugin for WordPress is vulnerable to authentication bypass via brute force in all versions up to, and including, 1.7.16. This is due to weak OTP One-Time Password generation using only 6 numeric digits combined with a 10-minute validity window and no rate limiting on verificatio...