title: Theme My Login 2FA < 1.2 -  Lack of Rate Limiting
description: The Theme My Login 2FA WordPress plugin before 1.2 does not rate limit 2FA validation attempts, which may allow an attacker to brute-force all possibilities, which shouldn't be too long, as the 2FA codes are 6 digits.
problem types: CWE-307 Improper Restriction of Excessive Authentication Attempts
affected:
{
vendor: Unknown
product: tml-2fa
versions:
status: affected, versionType: semver, version: 0, lessThan: 1.2
defaultStatus: unaffected
}