Login With Phone Number vulnerabilities
3 known vulnerabilities in Login With Phone Number from Idehweb. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
Login with phone number: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in Hamid Alinia Login with phone number login-with-phone-number.This issue affects Login with phone number: from n/a through <= 1.6.93.
- 8.8 High severity
OTP Login With Phone Number, OTP Verification: Cross-Site Request Forgery
The Login with phone number plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5.6. This is due to missing nonce validation on the 'lwp_update_password_action' function. This makes it possible for unauthenticat
- 8.8 High severity
Login with Phone Number WordPress Plugin: Improper Neutralization of Special Elements used in an SQL Command
The Login with Phone Number WordPress Plugin, version < 1.4.2, is affected by an authenticated SQL injection vulnerability in the 'ID' parameter of its 'lwp_forgot_password' action.