India-web-developer vulnerabilities
We track 2 vulnerabilities in India-web-developer products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 27, 2026.
2vulnerabilities
1critical
1high
0exploited
8.9average CVSS score
Latest India-web-developer vulnerabilities
- 9.8 Critical severity
Login with OTP: Improper Restriction of Excessive Authentication Attempts
The Login with OTP plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.6. This is due to an incomplete fix for CVE-2024-11178: the rate-limit/lockout check added to `otpl_login_action()` was placed only inside th
- 8.1 High severity
Login with OTP: Authentication Bypass Using an Alternate Path or Channel
The Login With OTP plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.4.2. This is due to the plugin generating too weak OTP, and there’s no attempt or time limit. This makes it possible for unauthenticated attacker