<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: wp-2fa</title><description>Every new CVE for wp-2fa.</description><link>https://agentprime.io/</link><item><title>CVE-2026-108066: WP 2FA &lt; 4.2.0 - Admin+ Arbitrary User 2FA Removal via IDOR</title><link>https://agentprime.io/advisories/CVE-2026-108066/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-108066/</guid><description>CVSS 2.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 14 Oct 2026 06:00:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-103514: WP 2FA &lt; 4.1.0 - Two-Factor Authentication Bypass via TOTP Code Replay</title><link>https://agentprime.io/advisories/CVE-2026-103514/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-103514/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 03 Oct 2026 06:00:25 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-15372: WP 2FA &lt; 4.1.0 - Two-Factor Authentication Bypass via Passkeys Provider</title><link>https://agentprime.io/advisories/CVE-2026-15372/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-15372/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 05 Aug 2026 06:00:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-12988: WP 2FA &lt; 3.1.1.2 - Account Takeover via 2FA Setup Email Binding</title><link>https://agentprime.io/advisories/CVE-2026-12988/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-12988/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 14 Jul 2026 06:00:02 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-12628: WP 2FA &lt; 3.0.0 - Second Factor Bypass</title><link>https://agentprime.io/advisories/CVE-2025-12628/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-12628/</guid><description>CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 24 Nov 2025 12:58:37 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-44587: WordPress WP 2FA plugin &lt;= 2.6.3 - Sensitive Data Exposure via Log File vulnerability</title><link>https://agentprime.io/advisories/CVE-2022-44587/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-44587/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 21 Jun 2024 15:54:52 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-2891: WP 2FA &lt; 2.3.0 - Time-Based Side-Channel Attack</title><link>https://agentprime.io/advisories/CVE-2022-2891/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-2891/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 10 Oct 2022 00:00:00 GMT</pubDate><category>CVE</category></item></channel></rss>