CVE-2026-16619 | miniOrange 2FA Plugin up to 6.2.7 on WordPress excessive authentication

August 7, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in miniOrange 2FA Plugin up to 6.2.7 on WordPress. Affected is an unknown function. This manipulation causes improper restriction of excessive authentication attempts.

This vulnerability is tracked as CVE-2026-16619. The attack is possible to be carried out remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More