WP Security CheckVulnerability data as of October 22, 2026

Known vulnerabilities in Google Authenticator

Google Authenticator for your WordPress blog.

2Reported vulnerabilities
6.5Highest CVSS score
0.56Latest version
20,000+Active installs

What to do now

Update Google Authenticator to 0.56 or later. 2 of these have a fixed version available. Updating resolves them.

Plugin last updated: July 28, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
WF-f3bbc23b-94af-4f4f-8b5f-6af41108fd93 Medium 6.5 — 0.47 and earlier 0.48 April 28, 2016
CVE-2026-14204 Medium 4.3 0.2% 0.55 and earlier 0.56 August 3, 2026

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.