CVE-2026-16035 | miniOrange 2FA Plugin up to 6.2.6 on WordPress authorization

August 4, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in miniOrange 2FA Plugin up to 6.2.6 on WordPress. This impacts an unknown function. The manipulation leads to missing authorization.

This vulnerability is uniquely identified as CVE-2026-16035. The attack is possible to be carried out remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More