Threats tagged 'ghsa-23f7-52jh-vwrc'

The Limit Login Attempts Security WordPress plugin versions before 3.4.1 have a vulnerability where two-factor authentication (2FA) is not enforced on all password-authentication routes. This allows an attacker who already knows a user's password to bypass the second factor by authenticating through an alternative login interface, gaining access without completing 2FA.