Skip to content
Sign in
7.5 High

CVE-2026-114443 The Security Plugin, Firewall & Malware Scanner with Auto Removal WordPress plugin before 2.191 does not verify the…

Description

The Security Plugin, Firewall & Malware Scanner with Auto Removal WordPress plugin before 2.191 does not verify the account password before accepting an authenticator-app two-factor code at login, allowing anyone who holds a user's current authenticator code to log in as that user, including an administrator, without the password.

Affected products and versions

Product Affected versions Fixed in
Security Plugin, Firewall & Malware Scanner with Auto Removal 2.191 earliest → < 2.191 2.191

Other CVEs of Security Plugin, Firewall & Malware Scanner with Auto Removal

The 2 CVEs of Security Plugin, Firewall & Malware Scanner with Auto Removal →
CVE-2026-114444 The Security Plugin, Firewall & Malware Scanner with Auto Removal WordPress plugin before 2.191 does not restrict its… 4.4 Medium
Track this CVE