CVE-2025-12628

WP 2FA < 3.0.0 - Second Factor Bypass PUBLISHED

Description (CNA)

The WP 2FA WordPress plugin does not generate backup codes with enough entropy, which could allow attackers to bypass the second factor by brute forcing them

Affected (CNA)

Vendor / product	Versions
Unknown / WP 2FA	affected 0 before 3.0.0

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/5e2d033c-dde6-4774-8588-cbe268c0d797/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.