Mmastodon TechnologyCybersecurity first seen 1 d ago, last 1 d ago, peak #3

WordPress plugin All In One Login vulnerable to code brute-forcing

Original: 🚨 EUVD-2026-117334 📊 Score: n/a 📦 Product: All In One Login 🏢 Vendor: Unknown 📅 Updated: 2026-11-05 📝 The All In One Log

A vulnerability tracked as EUVD-2026-117334 affects the All In One Login WordPress plugin before version 2.5.0. The plugin fails to adequately limit the number of attempts that can be made against the short numeric code it uses, allowing attackers to brute-force their way past the login protection. Site administrators using the plugin are advised to update to version 2.5.0 or later to secure their login pages.

Why now: A newly published vulnerability advisory alerts WordPress administrators to a brute-force flaw in a widely used login plugin.

All In One LoginWordPressEUVD-2026-117334

Open on mastodon →

Evidence

• 🚨 EUVD-2026-117334 📊 Score: n/a 📦 Product: All In One Login 🏢 Vendor: Unknown 📅 Updated: 2026-11-05 📝 The All In One Login WordPress plugin before 2.5.0 does not adequately restrict the number of attempts that can be made against the short numeric code used by its… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/4966557