Skip to main content

Software intelligence

Google Authenticator vulnerabilities

2 tracked advisories · slug google-authenticator

Important: Google Authenticator appearing in this catalog does not mean your website is affected. Exposure depends on your installed version. How SiteRespond intelligence works

Tracked advisories

2

Latest advisory

3 August 2026

CISA KEV matches

0

In this WordPress feed

WordPress slug

google-authenticator

Plugin

What this means for Google Authenticator

This catalog lists 2 known advisories affecting Google Authenticator. The most recent was published on 3 August 2026. If you use this software, compare your installed version against the affected ranges on each advisory and update to a fixed release outside those ranges. SiteRespond Defence checks your actual installed version when the plugin is connected — listing here does not by itself mean your site is vulnerable.

Latest issues

  • Google Authenticator <= 0.55 - Cross-Site Request Forgery

    May trick authenticated users into performing unintended actions.

    Published 3 August 2026

  • Google Authenticator <= 0.47 - Improper Authentication

    This advisory describes a other issue in the affected software. Review the source advisory and your installed version to assess exposure.

    Published 28 April 2016

Vulnerability types

  • CSRF1

Authentication (inferred from titles)

  • Unauthenticated0
  • Authenticated0
  • Unspecified2

Advisory history

Known Google Authenticator advisories published by month.

All advisories

Check whether your installed version is affected

SiteRespond Defence matches your installed Google Authenticator version against this catalog when the Defence plugin is connected to your WordPress site.