https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-11T23:38:48.576879+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-123697 CVE-2026-123697 — Security For WooCommerce <= 1.0.16 - Unauthenticated Two-Factor Code and Secret Disclosure 2026-11-11T23:38:48.578623+00:00

Affected: Unknown Security For WooCommerce

The Security For WooCommerce WordPress plugin through 1.0.16 does not restrict who can request a user's current two-factor code or two-factor secret, allowing unauthenticated users to obtain them for any account and bypass the second factor on sites where its one-time password library is available.