CVE-2026-12695 | miniOrange 2FA Plugin up to 6.2.5 on WordPress improper authentication

July 31, 2026 Yanac

A vulnerability categorized as critical has been discovered in miniOrange 2FA Plugin up to 6.2.5 on WordPress. This affects an unknown function. The manipulation results in improper authentication.

This vulnerability was named CVE-2026-12695. The attack may be performed from remote. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More