CVE-2026-82519 | Really Simple Plugins Really Simple Security Plugin up to 9.8.1 Profile Page Update delete_two_fa_meta two-factor-authentication improper authorization

A vulnerability was found in Really Simple Plugins Really Simple Security Plugin up to 9.8.1. It has been declared as critical. This issue affects the function delete_two_fa_meta of the component Profile Page Update Handler. Such manipulation of the argument two-factor-authentication leads to improper authorization.

This vulnerability is uniquely identified as CVE-2026-82519. The attack can be launched remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More