Really Simple Security Vulnerability Can Bypass Email 2FA

A Really Simple Security vulnerability can reset completed email two-factor authentication, potentially allowing an attacker who already knows a WordPress…