Gsayed786 vulnerabilities
We track 2 vulnerabilities in Gsayed786 products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 15, 2025.
2vulnerabilities
1critical
1high
0exploited
8.9average CVSS score
Latest Gsayed786 vulnerabilities
- 9.8 Critical severity
Orion SMS OTP Verification.: Authentication Bypass Using an Alternate Path or Channel
The Orion SMS OTP Verification plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.1.7. This is due to the plugin not properly validating a user's identity prior to updating their password. Th
- 8.1 High severity
Orion Login with SMS: Authentication Bypass Using an Alternate Path or Channel
The Orion Login with SMS plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.5. This is due to the olws_handle_verify_phone() function not utilizing a strong enough OTP value, exposing the hash needed to genera