HIGH 7.5 NVD

CVE-2026-123091

The Vigilant WordPress plugin before 2.11.0 does not enforce its two-factor authentication on login forms other than the default WordPress one, allowing an att

The Vigilant WordPress plugin before 2.11.0 does not enforce its two-factor authentication on login forms other than the default WordPress one, allowing an attacker who knows a user's password to skip the second factor and log in as that user.

References

https://wpscan.com/vulnerability/df65184a-9223-42de-8b4d-53ff427a9874/

Published: 2026-11-09 · Source: NVD · Feed updated: 2026-11-10

This high severity vulnerability with a CVSS score of 7.5 was published on 2026-11-09 via NVD.

vulnfeed aggregates 17092 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.