Description

The WP 2FA WordPress plugin does not generate backup codes with enough entropy, which could allow attackers to bypass the second factor by brute forcing them

INFO

Published Date :

2025-11-24T12:58:37.015Z

Last Modified :

2025-11-24T15:09:10.780Z

Source :

WPScan
AFFECTED PRODUCTS

The following products are affected by CVE-2025-12628 vulnerability.

No data.

REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-12628.

CVSS Vulnerability Scoring System