https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 10 Nov 2026 01:58:42 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-114443 <p>The Security Plugin, Firewall &amp; Malware Scanner with Auto Removal WordPress plugin before 2.191 does not verify the account password before accepting an authenticator-app two-factor code at login, allowing anyone who holds a user&#39;s current authenticator code to log in as that user, including an administrator, without the password.</p> <p>The Security Plugin, Firewall &amp; Malware Scanner with Auto Removal WordPress plugin before 2.191 does not verify the account password before accepting an authenticator-app two-factor code at login, allowing anyone who holds a user&#39;s current authenticator code to log in as that user, including an administrator, without the password.</p> https://db.gcve.eu/vuln/fkie_cve-2026-114443 https://db.gcve.eu/vuln/ghsa-cf3c-vhpc-r6rv <p>The Security Plugin, Firewall &amp; Malware Scanner with Auto Removal WordPress plugin before 2.191 does not verify the account password before accepting an authenticator-app two-factor code at login, allowing anyone who holds a user&#39;s current authenticator code to log in as that user, including an administrator, without the password.</p> <p>The Security Plugin, Firewall &amp; Malware Scanner with Auto Removal WordPress plugin before 2.191 does not verify the account password before accepting an authenticator-app two-factor code at login, allowing anyone who holds a user&#39;s current authenticator code to log in as that user, including an administrator, without the password.</p> https://db.gcve.eu/vuln/ghsa-cf3c-vhpc-r6rv