Unknown WP 2FA

• CVE-2026-108066 Low 2.7 WP 2FA < 4.2.0 - Admin+ Arbitrary User 2FA Removal via IDOR 0.3%
• CVE-2026-103514 High 7.5 WP 2FA < 4.1.0 - Two-Factor Authentication Bypass via TOTP Code Replay 0.3%
• CVE-2026-15372 High 7.5 WP 2FA < 4.1.0 - Two-Factor Authentication Bypass via Passkeys Provider 0.5%
• CVE-2026-12988 Medium 6.4 WP 2FA < 3.1.1.2 - Account Takeover via 2FA Setup Email Binding 0.3%
• CVE-2025-12628 Medium 6.3 WP 2FA < 3.0.0 - Second Factor Bypass 0.2%
• CVE-2022-2891 Unrated WP 2FA < 2.3.0 - Time-Based Side-Channel Attack 1.0%