Two Factor
Monthly
Unauthenticated denial of service in the Two Factor WordPress plugin versions up to and including 0.16.0 allows remote attackers to degrade service availability. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) indicates a network-reachable, low-complexity attack requiring no authentication or user interaction, but with only low availability impact and no effect on confidentiality or integrity (base score 5.3). No public exploit identified at time of analysis; the vulnerability is tracked as CWE-770 (Allocation of Resources Without Limits or Throttling).
Unauthenticated denial of service in the Two Factor WordPress plugin versions up to and including 0.16.0 allows remote attackers to degrade service availability. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) indicates a network-reachable, low-complexity attack requiring no authentication or user interaction, but with only low availability impact and no effect on confidentiality or integrity (base score 5.3). No public exploit identified at time of analysis; the vulnerability is tracked as CWE-770 (Allocation of Resources Without Limits or Throttling).