All products

login-with-phone-number

WordPress · Plugin
18 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
OTP Login With Phone Number, OTP Verification <= 1.8.78 - Authenticated (Subscriber+) Account TakeoverCVE-2026-115967 login-with-phone-number WordPress High Fix reported
OTP Login With Phone Number, OTP Verification <= 1.8.77 - Missing AuthorizationCVE-2026-110374 login-with-phone-number WordPress Medium Fix reported
OTP Login With Phone Number, OTP Verification <= 1.8.77 - Unauthenticated Privilege EscalationCVE-2026-110373 login-with-phone-number WordPress High Fix reported
OTP Login With Phone Number, OTP Verification <= 1.8.70 - OTP Brute ForceCVE-2026-65570 login-with-phone-number WordPress Critical Fix reported
OTP Login With Phone Number, OTP Verification <= 1.8.60 - Unauthenticated Authentication Bypass via Firebase OTP VerificationCVE-2026-3655 login-with-phone-number WordPress Critical Fix reported
WooCommerce OTP Login With Phone Number, OTP Verification <= 1.8.47 - Authentication BypassCVE-2025-8342 login-with-phone-number WordPress High Fix reported
Login with phone number <= 1.7.49 - Authenticated (Subscriber+) Authorization Bypass to Privilege EscalationCVE-2024-6482 login-with-phone-number WordPress High Fix reported
Login with phone number <= 1.7.35 - Authenticated (Administrator+) Stored Cross-Site ScriptingCVE-2024-37429 login-with-phone-number WordPress Medium Fix reported
Login with phone number <= 1.7.34 - Insecure Password Reset MechanismCVE-2024-6125 login-with-phone-number WordPress High Fix reported
Login with phone number <= 1.7.26 - Authentication Bypass due to Missing Empty Value CheckCVE-2024-5150 login-with-phone-number WordPress Critical Fix reported
Login with phone number <= 1.7.18 - Missing AuthorizationCVE-2024-34371 login-with-phone-number WordPress Medium Fix reported
Login with phone number <= 1.6.93 - Missing AuthorizationCVE-2024-32832 login-with-phone-number WordPress Medium Fix reported
Login with phone number <= 1.7.16 - Unauthorized Account Password Change to Privilege EscalationCVE-2024-32507 login-with-phone-number WordPress High Fix reported
Login with phone number <= 1.6.93 - Cross-Site Request ForgeryCVE-2024-31424 login-with-phone-number WordPress Medium Fix reported
Login with phone number <= 1.3.7 - Authenticated (Admin+) Stored Cross-Site ScriptingCVE-2022-0598 login-with-phone-number WordPress Medium Fix reported
Login with phone number <= 1.5.6 - Cross-Site Request Forgery to User Password ChangeCVE-2023-4916 login-with-phone-number WordPress High Fix reported
Login with phone number <= 1.4.2 - Reflected Cross-Site ScriptingCVE-2023-23492 login-with-phone-number WordPress Medium Fix reported
Login with phone number <= 1.3.6 - Unauthenticated Remote Plugin DeletionCVE-2022-0593 login-with-phone-number WordPress Medium Fix reported