What’s Vulnerable › Products
Hamid Alinia Login with phone number vulnerabilities
18 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.
Check whether your Hamid Alinia Login with phone number version is affected
Latest Hamid Alinia Login with phone number vulnerabilities
- CVE-2026-115967 — WordPress Login with phone number plugin <= 1.8.78 - Broken Authentication vulnerability (CVSS 8.8)
- CVE-2026-110373 — WordPress Login with phone number plugin <= 1.8.77 - Privilege Escalation vulnerability (CVSS 8.1)
- CVE-2026-110374 — WordPress Login with phone number plugin <= 1.8.77 - Broken Access Control vulnerability (CVSS 4.3)
- CVE-2026-65570 — WordPress Login with phone number plugin <= 1.8.70 - Bypass vulnerability vulnerability (CVSS 8.1)
- CVE-2026-3655 — OTP Login With Phone Number, OTP Verification <= 1.8.60 - Unauthenticated Authentication Bypass via Firebase OTP Verification (CVSS 9.8)
- CVE-2024-32832 — WordPress Login with Phone Number plugin <= 1.6.93 - Broken Access Control vulnerability (CVSS 9.8)
- CVE-2025-8342 — WooCommerce OTP Login With Phone Number, OTP Verification <= 1.8.47 - Authentication Bypass (CVSS 8.1)
- CVE-2024-6482 — Login with phone number <= 1.7.49 - Authenticated (Subscriber+) Authorization Bypass to Privilege Escalation (CVSS 8.8)
- CVE-2024-37429 — WordPress Login with phone number plugin <= 1.7.35 - Admin+ Cross Site Scripting (XSS) vulnerability (CVSS 4.8)
- CVE-2024-6125 — Login with phone number <= 1.7.34 - Insecure Password Reset Mechanism (CVSS 8.1)
- CVE-2024-5150 — Login with phone number <= 1.7.26 - Authentication Bypass due to Missing Empty Value Check (CVSS 9.8)
- CVE-2024-32507 — WordPress Login with phone number plugin <= 1.7.16 - Privilege Escalation vulnerability (CVSS 8.8)
- CVE-2024-34371 — WordPress Login with phone number plugin <= 1.7.18 - Broken Access Control vulnerability (CVSS 4.3)
- CVE-2024-31424 — WordPress Login with Phone Number plugin <= 1.6.93 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 8.8)
- CVE-2023-4916 — Login with phone number <= 1.5.6 - Cross-Site Request Forgery to User Password Change (CVSS 8.8)
- CVE-2023-23492 — (CVSS 8.8)
- CVE-2022-0598 — Login with phone number < 1.3.8 - Multiple Admin+ Stored XSS (CVSS 4.8)
- CVE-2022-0593 — Login with phone number < 1.3.7 - Unauthenticated remote plugin deletion (CVSS 6.5)