CVE-2025-12628 | WP 2FA Plugin up to 2.x on WordPress Backup Code entropy

A vulnerability was found in WP 2FA Plugin up to 2.x on WordPress. It has been classified as problematic. The impacted element is an unknown function of the component Backup Code Handler. This manipulation causes insufficient entropy.

This vulnerability appears as CVE-2025-12628. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is recommended.