CVE-2026-118201 | Limit Login Attempts Security Plugin up to 3.4.0 on WordPress Two-Factor Authentication improper authentication

A vulnerability was found in Limit Login Attempts Security Plugin up to 3.4.0 on WordPress and classified as critical. This impacts an unknown function of the component Two-Factor Authentication. Executing a manipulation can lead to improper authentication.

The identification of this vulnerability is CVE-2026-118201. The attack may be launched remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More