via pluginvulnerabilities.com => original post link
On the WordPress Support Forum, someone asked not that long ago if two-factor authentication (2FA) would prevent websites being hacked through security flaws in WordPress plugins? It’s a good question and another security provider didn’t really answer the question.
For those not familiar, 2FA refers to having a second element when authenticating, that is logging in to a system, beyond the username/password. There is a rather long Wikipedia entry, if you want to learn more about that. But what is important to answer the question being posed is that 2FA only comes in to play if someone is trying to log in someone else’s account and they already know the username and password. [Read more]