WP 2FA – Two-factor authentication for WordPress
If you wait for a fix, how long is the wait?
Across its last 3 feature releases, a follow-up patch arrived in 1–63 days (typically 28 days). 2 others never received one.
Measured from this plugin's own release history — how quickly a follow-up patch has landed after each feature release. A record of what happened before, not a prediction, and not advice to delay a security fix.
| Version | Released | Threads | Verdict |
|---|---|---|---|
| 4.1.0 | 2026-08-11 | 0 | NO READ |
| 4.0.0 | 2026-07-07 | 0 | NO READ |
| 3.1.1.2 | 2026-05-20 | 0 | NO READ |
| 3.1.1 | 2026-02-18 | 0 | NO READ |
| 3.1.0 | 2025-12-17 | 0 | NO READ |
| 3.0.1 | 2025-12-04 | 0 | NO READ |
| 3.0.0 | 2025-11-06 | 0 | NO READ |
| 2.9.3 | 2025-09-11 | 0 | NO READ |
| 2.9.2 | 2025-08-12 | 0 | NO READ |
| 2.9.1 | 2025-08-01 | 0 | NO READ |
| 2.9.0 | 2025-07-31 | 0 | NO READ |
| 2.8.0 | 2025-07-02 | 0 | NO READ |
| 2.6.2 | 2025-05-28 | 0 | NO READ |
| 2.7.0 | 2024-06-10 | 0 | NO READ |
| 2.6.4 | 2024-04-10 | 0 | NO READ |
| 2.6.3 | 2024-02-15 | 0 | NO READ |
| 2.6.1 | 2024-01-16 | 0 | NO READ |
| 2.6.0 | 2023-12-14 | 0 | NO READ |
| 2.5.0 | 2023-11-22 | 0 | NO READ |
| 2.4.2 | 2023-07-05 | 0 | NO READ |
// newest first · thread counts are exact-version matches · verdicts recompute on every sweep