TI-2025-12417 CVE-2025-13587 · GHSA-87q3-cqqr-mvcg
Two Factor (2FA) Authentication via Email <= 1.9.8 - Two-Factor Authentication Bypass via token
Priority LOW 29
The Two Factor (2FA) Authentication via Email plugin for WordPress is vulnerable to Two-Factor Authentication Bypass in versions up to, and including, 1.9.8.