plugin
2 known security issues reported for the Tml 2Fa WordPress plugin. Most recent disclosed Dec 18, 2023.
Running Tml 2Fa on your site? Check whether your installed version is affected.
Scan your site free[en] The Theme My Login 2FA WordPress plugin before 1.2 does not rate limit 2FA validation attempts, which may allow an attacker to brute-force all possibilities, which shouldn't be too long, as the 2FA codes are 6 digits.
The Wordfence Theme My Login 2FA is vulnerable to 2FA brute-forcing in version up to, but excluding, 1.2. This allows unauthenticated attackers to bypass the 2FA protection offered by the plugin.
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free