→ برگشت به فید آسیب‌پذیری‌ها CVE-2026-16619 · miniorange-2-factor-authentication

دور زدن احراز هویت (Auth Bypass) در افزونه miniOrange 2FA – Two Factor Authentication for WordPress (OTP, SMS, Email, Google Authenticator)

The miniOrange 2FA – Two Factor Authentication for WordPress (OTP, SMS, Email, Google Authenticator) plugin for WordPress is vulnerable to Two-Factor Authentication Bypass in all versions up to, and including, 6.2.7. This is due to no restrictions on the number of 2FA code attempts that can be made. This makes it possible for unauthenticated attackers to brute force 2FA codes.