Apologies. I agree we should get a paid login customization plugin rather than relying on volunteer support.
For your reference, it looks like this issue only occurs if the following social links after left blank:
Flickr, Tumblr, Skype, Instagram, Telegram
They can be modified to dummy urls (i.e https://mysite.com/sdgerhwhqerthw ) but if they are blank, then the site does not display the second MFA code request page when using WordFence MFA with “Enable Separate Prompt for Two Factor Code”, but instead shows thge username/password prompt page with a message asking for the MFA code to be entered.
We will put dummy url’s in these social links as a temporary work around, until we can move to a paid plugin.
Thanks