WordPress WP 2FA AuthBypass via Passkeys Provider (CVE-2026-15372)

wpscan.com 2026-08-05查看中文 →

Security AdvisoryCVE-2026-15372HighWP 2FA

Affected:

wp-2fa < 4.1.0

Fixed in:

4.1.0

Referenced CVEs: CVE-2026-15372

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from wpscan.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Pinpoint Booking System Unauthenticated Arbitrary Booking Price Manipulation Vulnerability 2026-08-10 s2member Pre-Auth Stored XSS via Shortcode (CVE-2026-15047) Advisory 2026-08-10 Hotel Booking Lite < 6.2.3 IDOR Vulnerability Advisory (CVE-2026-15238) 2026-08-10 Single Sign On For TNG <2.2.0 Unauthenticated Arbitrary Password Reset Vulnerability (CVE-2026-16299) 2026-08-10 Hotel Booking Lite Unauthenticated Payment Record Creation (CVE-2026-15237) 2026-08-10

Offline Archive

Offline screenshot & PDF are Pro-exclusive