Trusona for WordPress

Trusona for WordPress has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it remains unpatched as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.

The most common weakness is Missing Authorization, behind 1 of the records (100%).

The one issue recorded for Trusona for WordPress has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2026.

All of these findings were reported by Legion Hunter. Trusona for WordPress is installed on roughly 500 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium

4.3/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all Trusona for WordPress vulnerabilities before they are exploited.

Most severe open issueCVSS 4.3CVE-2026-24627

Trusona for WordPress <= 2.0.0 - Missing Authorization

Read the full analysis

Vulnerability Records

1 records


2026-01-10 03:44	Trusona for WordPress <= 2.0.0 - Missing Authorization Trusona for WordPress <= 2.0.0	`CVE-2026-24627`	4.3 Medium	Legion Hunter	No

Showing 1–1 of 1 reports

Latestv2.0.3

Trusona for WordPress

Author

Trusona

5.0(19)

100/100

Last Updated

2026-07-31 (1mo ago)

Active Installs

500+

Downloads

19,957

Requires WP

6.0+

Requires PHP

8.1+

Tested up to

WP 7.0.4

Created

2016-09-29 (10y ago)

Trusona provides the most popular passwordless 2FA login for FREE. Just point your phone to the secure QR code and voila – you are in. Top Features FREE passwordless MFA including support Hide username and password from login form Login without typing or remembering passwords NEW: Trusona ONLY Mode – get rid of the password fields FOREVER! Dynamic QR code displayed at login No SMS or OTP (one-time passwords) Patented anti-replay for added security One-click installation What is the Cost? Trusona’s passwordless 2FA is completely FREE – just download it today and start using it with one-click install. Support is included. We really mean it – it is totally FREE. How do I know it is secure? 73% of WordPress sites are vulnerable to attack – and passwords are most likely to blame. Trusona’s passwordless 2FA for WordPress is based on the most secure technology you will ever use. And now you can experience this level of true security for your WordPress accounts, too. In this version we added a Trusona ONLY mode in settings. This feature does not allow to show the user name and password fields. Setting this page to this mode is the most secure approach. Only recommended to advanced users. Please note: Once you download the Trusona WordPress Plugin you need to download the Trusona app. To download for iOS, visit the App Store. For Android devices, visit Google Play.

View on WordPress.org