Authenticator

Authenticator has one disclosed vulnerability in the WordSec catalog, all reported in 2022; it is fixed as of September 2026. Their average CVSS score is 8.1, and the most serious one scores 8.1 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Missing Authorization, behind 1 of the records (100%).

The one issue recorded for Authenticator has a vendor fix available, so running the current release closes it.

All of these findings were reported by István Márton. Authenticator is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSHigh

8.1/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Authenticator vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.1CVE-2022-3994

Authenticator <= 1.3.0 - Missing Authorization

Read the full analysis

Vulnerability Records

1 records


2022-11-26 00:00	Authenticator <= 1.3.0 - Missing Authorization Authenticator <= 1.3.0	`CVE-2022-3994`	8.1 High	István Márton	Yes

Showing 1–1 of 1 reports

Plugin Profile

Latestv1.3.1

Authenticator

Author

Syde GmbH (formerly Inpsyde)

5.0(8)

100/100

Last Updated

2026-01-21 (8mo ago)

Active Installs

1,000+

Downloads

99,662

Requires WP

5.0+

Requires PHP

5.6+

Tested up to

WP 6.9.7

Created

2008-08-17 (18y ago)

This plugin allows you to make your WordPress site accessible to logged in users only. In other words, to view your site they have to create or have an account on your site and be logged in. No configuration necessary, simply activating – that’s all. Crafted by Inpsyde The team at Inpsyde is engineering the web and WordPress since 2006. Donation? You want to donate – we prefer a positive review, not more. Bugs, technical hints or contribute Please give me feedback, contribute and file technical bugs on GitHub Repo. License Good news, this plugin is free for everyone! Since it’s released under the GPL, you can use it free of charge on your personal or commercial blog. But if you enjoy this plugin, you can thank me and leave a small donation for the time I’ve spent writing and supporting this plugin. And I really don’t want to know how many hours of my life this plugin has already eaten 😉 Translations The plugin comes with various translations, please refer to the WordPress Codex for more information about activating the translation. If you want to help to translate the plugin to your language, please have a look at the translation possibility in this page here. Donation? You want to donate – we prefer a positive review, not more.

View on WordPress.org