Google Authenticator

Explore Google Authenticator vulnerabilities across all versions. Currently tracking 1 known vulnerabilities, including severity, impact, and patch status.

Strategic Overview

Avg CVSSMedium
6.5/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Google Authenticator vulnerabilities before they are exploited.

Vulnerability Records

1 records
Showing 1–1 of 1 reports
Google Authenticator banner
Latestv0.56

Google Authenticator

Ivan

Author

Ivan

4.3(135)
86/100
Last Updated
2026-07-28 (2d ago)
Active Installs
20,000+
Downloads
729,647
Requires WP
4.5+
Requires PHP
0+
Tested up to
WP 7.0.2
Created
2011-05-16 (15y ago)

The Google Authenticator plugin for WordPress gives you two-factor authentication using the Google Authenticator app for Android/iPhone/Blackberry. If you are security aware, you may already have the Google Authenticator app installed on your smartphone, using it for two-factor authentication on Gmail/Dropbox/Lastpass/Amazon etc. The two-factor authentication requirement can be enabled on a per-user basis. You could enable it for your administrator account, but log in as usual with less privileged accounts. If You need to maintain your blog using an Android/iPhone app, or any other software using the XMLRPC interface, you can enable the App password feature in this plugin, but please note that enabling the App password feature will make your blog less secure. Credits Thanks to: Miguel Mendez Z for responsibly disclosing a CSRF account lockout vulnerability. Oleksiy for a bugfix in multisite. Paweł Nowacki for the Polish translation Fabio Zumbi for the Portuguese translation Guido Schalkx for the Dutch translation. Henrik.Schack for writing/maintaining versions 0.20 through 0.48 Tobias Bäthge for his code rewrite and German translation. Pascal de Bruijn for his “relaxed mode” idea. Daniel Werl for his usability tips. Dion Hulse for his bugfixes. Aldo Latino for his Italian translation. Kaijia Feng for his Simplified Chinese translation. Alex Concha for his security tips. Jerome Etienne for his jquery-qrcode plugin. Sébastien Prunier for his Spanish and French translation.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C