Wordpress Alert: Two-factor authentication bypass in plugins

A third-party login route accepts a password without enforcing the site's second factor. A stolen password may become sufficient for account access.

https://switchboardtechservices.com/guides/wordpress-alert-two-factor-authentication-bypass-in-plugins/

By Switchboard Tech Services · Originally published 2026-08-04

#Switchboard #Guide