Google Authenticator (Unknown) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-08-06. Vendor: Unknown.

CVEs of Google Authenticator

• CVE-2026-14204 - CVSS 6.5 (medium), 2026-08-06: The Google Authenticator WordPress plugin before 0.56 does not verify a CSRF nonce when saving its two-factor setup, allowing attackers to trick a logged-in…
• CVE-2022-0875 - CVSS 4.3 (medium), 2022-06-27: The Google Authenticator WordPress plugin before 1.0.5 does not have CSRF check when saving its settings, and does not sanitise as well as escape them,…