Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2025-12628

WP 2FA < 3.0.0 - Second Factor Bypass

Description

The WP 2FA WordPress plugin does not generate backup codes with enough entropy, which could allow attackers to bypass the second factor by brute forcing them

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown WP 2FA

Default version status: unaffected

  • 0 to < 3.0.0affected

References