← Back

2fa

Vendor: Thememylogin • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Thememylogin
12fa
Jun 17, 2026
Dec 18, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
The Theme My Login 2FA WordPress plugin before 1.2 does not rate limit 2FA validation attempts, which may allow an attacker to brute-force all possibilities, which shouldn't be too long, as the 2FA codes are 6 digits.