UNKNOWNCVSS not yet scoredVulnerability
CVE-2026-118185
The Security Optimizer WordPress plugin before 1.6.9 does not limit the number of two-factor authentication codes that can be submitted for a pending login, allowing an attacker who already knows a user's password to brute force the second factor and take over the account.
Properties
- Last source
- NVD
- Nvd fetched at
- 2026-10-31T08:15:48.788147+00:00
- Cve id
- CVE-2026-118185
- First seen by Signal
- 2026-10-31T08:16:23+00:00
- Retrieved at
- 2026-10-31T08:16:23+00:00
- Published at
- 2026-10-31T06:16:33.503
- Last modified
- 2026-10-31T06:16:33.503
Explore deeper with Ninja Signal's threat intelligence graph