Thedrifted vulnerabilities
We track 1 vulnerability in Thedrifted products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 2, 2025.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Thedrifted vulnerabilities
- 9.8 Critical severity
OTP-less one tap Sign in: Missing Authorization
The OTP-less one tap Sign in plugin for WordPress is vulnerable to privilege escalation via account takeover in versions 2.0.14 to 2.0.59. This is due to the plugin not properly validating a user's identity prior to updating their details, like email. This mak