CVE-2026-123091
HIGH
NVD
CVSS Score
7.5
Severity
HIGH
Published
Nov 09, 2026
Vendor
unknown
Description
The Vigilant WordPress plugin before 2.11.0 does not enforce its two-factor authentication on login forms other than the default WordPress one, allowing an attacker who knows a user's password to skip the second factor and log in as that user.