CVE WATCH / VULNERABILITY DETAIL
CVE-2026-118201
HIGHCVSS 7.5NVD feed
Published 9 November 2026 · tracked since 9 November 2026
Description
The Limit Login Attempts Security WordPress plugin before 3.4.1 does not enforce its two-factor authentication on every password-authentication route, so an attacker who already knows a protected user's password can authenticate through an alternative login interface and obtain that user's access w
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-124684 MEDIUM 5.1
- CVE-2026-124591 MEDIUM 5.5
- CVE-2026-123460 HIGH 7.1
- CVE-2026-120838 MEDIUM 6.5
- CVE-2026-120367 HIGH 7.5
- CVE-2026-115252 CRITICAL 10
- CVE-2026-113702 MEDIUM 4.3
- CVE-2026-106466 HIGH 7.5
- CVE-2026-106008 MEDIUM 5.3
- CVE-2026-121764 HIGH 7.1