https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T22:21:08.630302+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-14291 CVE-2026-14291 — Security Ninja (Premium) < 5.290 - Two-Factor Authentication Bypass via secnin_skip_2fa 2026-10-12T22:21:08.631339+00:00

Affected: Unknown security-ninja-premium

The security-ninja-premium WordPress plugin before 5.290 does not verify the second authentication factor in one of its two-factor authentication code paths, allowing an unauthenticated attacker who knows a user's password to complete authentication without the one-time code and bypass enforced two-factor authentication for any account, including administrators. The affected two-factor module ships only in the premium build.