CVE-2026-14291

The CVE-2026-14291 entry concerns the security-ninja-premium WordPress plugin (before 5.290). The issue is that one of the two-factor authentication (2FA) code paths does not verify the second factor, enabling an unauthenticated attacker who knows a user’s password to complete authentication with...

PT-2026-63574

The security-ninja-premium WordPress plugin before 5.290 does not verify the second authentication factor in one of its two-factor authentication code paths, allowing an unauthenticated attacker who knows a user's password to complete authentication without the one-time code and bypass enforced...