OTP Login & Register Woocommerce vulnerabilities

2 known vulnerabilities in OTP Login & Register Woocommerce from XootiX. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Waitlist Woocommerce ( Back in stock notifier ): Incorrect Authorization

  CVE-2024-5324Jun 6, 2024XootiXEPSS 1.51%

  Multiple plugins for WordPress utilizing the XootiX Framework are vulnerable to unauthorized modification of data due to a missing capability check on the 'import_settings' function in various versions. This makes it possible for authenticated attackers, with

• 8.1 High severity

  OTP Login & Register Woocommerce: Improper Authentication

  CVE-2023-2706May 17, 2023XootiXEPSS 1.72%

  The OTP Login Woocommerce & Gravity Forms plugin for WordPress is vulnerable to authentication bypass. This is due to the fact that when generating OTP codes for users to use in order to login via phone number, the plugin returns these codes in an AJAX respons