Wrong code accepted?

So, when I entering random 6 digit key ( which completely different from key generated from app), wordpress always accept it.
Can anyone tell me what happen?

Best Regards

https://www.ads-software.com/plugins/google-authenticator/