What’s Vulnerable › Products

WordPress.org Two Factor vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your WordPress.org Two Factor version is affected

Latest WordPress.org Two Factor vulnerabilities

• CVE-2026-100508 — WordPress Two Factor plugin <= 0.16.0 - Denial of Service Attack vulnerability (CVSS 5.3)