CVE-2026-15372 | WP 2FA Plugin up to 4.0.x on WordPress improper authentication

August 5, 2026 Yanac

A vulnerability, which was classified as critical, has been found in WP 2FA Plugin up to 4.0.x on WordPress. The affected element is an unknown function. The manipulation leads to improper authentication.

This vulnerability is documented as CVE-2026-15372. The attack can be initiated remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More