UNKNOWNCVSS not yet scoredVulnerability
CVE-2026-114443
The Security Plugin, Firewall & Malware Scanner with Auto Removal WordPress plugin before 2.191 does not verify the account password before accepting an authenticator-app two-factor code at login, allowing anyone who holds a user's current authenticator code to log in as that user, including an administrator, without the password.
Properties
- Last source
- NVD
- Nvd fetched at
- 2026-10-30T07:58:06.356713+00:00
- Cve id
- CVE-2026-114443
- First seen by Signal
- 2026-10-30T07:59:21+00:00
- Retrieved at
- 2026-10-30T07:59:21+00:00
- Published at
- 2026-10-30T06:16:45.533
- Last modified
- 2026-10-30T06:16:45.533
Explore deeper with Ninja Signal's threat intelligence graph