CVE-2024-32568: Melapress Wp 2fa

Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP 2FA wp-2fa.This issue affects WP 2FA: from n/a through <= 2.6.2.

Affected products

• Melapress Wp 2fa: before 2.6.3 (fixed in 2.6.3)

Published 2024-04-18. Last modified 2026-06-17.