What’s Vulnerable › Products

Google Authenticator vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your Google Authenticator version is affected

Latest Google Authenticator vulnerabilities

• CVE-2026-14204 — Google Authenticator < 0.56 - 2FA Secret Overwrite via CSRF (CVSS 6.5)
• CVE-2022-44589 — WordPress miniOrange's Google Authenticator Plugin <= 5.6.1 is vulnerable to Sensitive Data Exposure (CVSS 7.5)
• CVE-2022-4943 — miniOrange's Google Authenticator <= 5.6.5 - Missing Authorization to Plugin Settings Change (CVSS 5.3)
• CVE-2022-42461 — WordPress miniOrange's Google Authenticator plugin <= 5.6.1 - Broken Access Control vulnerability (CVSS 8.8)
• CVE-2022-1321 — miniOrange's Google Authenticator < 5.5.6 - Admin+ Stored Cross-Site Scripting (CVSS 4.8)
• CVE-2022-0875 — miniOrange Google Authenticator < 1.0.5 - CSRF to Stored Cross-Site Scripting (CVSS 4.3)
• CVE-2022-0229 — miniOrange's Google Authenticator < 5.5 - Unauthenticated Arbitrary Options Deletion (CVSS 8.1)