Description
Unauthenticated Denial of Service Attack in Two Factor <= 0.16.0 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WordPress.org | Two Factor | ≤ 0.16.0 | — |
Medium · 5.3
CVE-2026-100508
EUVD-2026-89938GHSA-354m-g9fm-q6gw
WordPress Two Factor plugin <= 0.16.0 - Denial of Service Attack vulnerability
Published Sep 30, 2026 · Updated Sep 30, 2026 · Assigned by Patchstack