← CVE Intelligence

CVE-2026-8293

Really Simple Security < 9.5.10.1 - Authentication Bypass via Two-Factor OTP Skip PUBLISHED

Description (CNA)

The Really Simple Security WordPress plugin before 9.5.10.1 does not enforce the second-factor challenge in two of its two-factor authentication REST endpoints, allowing an attacker who knows a user's password to obtain a WordPress authentication session for that user without completing the email OTP challenge.

Affected (CNA)

Vendor / productVersions
Unknown / Really Simple Securityaffected 0 before 9.5.10.1

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.