Vulnerability in Admin Safety Guard — Login Security, Limit Logins, 2fa & Brute Force Protection
CVE-2026-16578
The Admin Safety Guard — Login Security, Limit Logins, 2FA & Brute Force Protection WordPress plugin before 1.4.0 does not perform any capability check on one of its REST API endpoints, allowing unauthenticated attackers to retrieve the fu…
Affected products
- Unknown Admin Safety Guard — Login Security, Limit Logins, 2fa & Brute Force Protection — versions 1.2.7
References
- contact@wpscan.com (technical-description, exploit, vdb-entry)