Hamid-alinia-idehweb vulnerabilities
We track 1 vulnerability in Hamid-alinia-idehweb products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 14, 2024.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Hamid-alinia-idehweb vulnerabilities
- 8.8 High severity
OTP Login With Phone Number, OTP Verification: Improper Privilege Management
The Login with phone number plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.7.49. This is due to a lack of validation and missing capability check on user-supplied data in the 'lwp_update_password_action' func