Idehweb vulnerabilities
We track 3 vulnerabilities in Idehweb products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on April 15, 2024.
Latest Idehweb vulnerabilities
- 8.8 High severity
Login with phone number: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in Hamid Alinia Login with phone number login-with-phone-number.This issue affects Login with phone number: from n/a through <= 1.6.93.
- 8.8 High severity
OTP Login With Phone Number, OTP Verification: Cross-Site Request Forgery
The Login with phone number plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5.6. This is due to missing nonce validation on the 'lwp_update_password_action' function. This makes it possible for unauthenticat
- 8.8 High severity
Login with Phone Number WordPress Plugin: Improper Neutralization of Special Elements used in an SQL Command
The Login with Phone Number WordPress Plugin, version < 1.4.2, is affected by an authenticated SQL injection vulnerability in the 'ID' parameter of its 'lwp_forgot_password' action.