https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 23:21:53 +0000 https://cve.radiocsirt.org/vuln/cve-2026-16036 <p><strong>Affected:</strong> Unknown miniOrange 2FA</p> <p>The miniOrange 2FA WordPress plugin before 6.2.7 does not bind the second factor being configured during the pre-login two-factor challenge to the target account&#39;s existing factor, allowing an attacker who knows a user&#39;s password to rebind that user&#39;s second factor to an attacker-controlled destination, complete the challenge, and take over the account, including administrator accounts.</p> <p><strong>Affected:</strong> Unknown miniOrange 2FA</p> <p>The miniOrange 2FA WordPress plugin before 6.2.7 does not bind the second factor being configured during the pre-login two-factor challenge to the target account&#39;s existing factor, allowing an attacker who knows a user&#39;s password to rebind that user&#39;s second factor to an attacker-controlled destination, complete the challenge, and take over the account, including administrator accounts.</p> https://cve.radiocsirt.org/vuln/cve-2026-16036