What’s Vulnerable › Products

WSO2 Email OTP Authenticator vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your WSO2 Email OTP Authenticator version is affected

Latest WSO2 Email OTP Authenticator vulnerabilities

• CVE-2025-13591 — Username Enumeration via Authentication Endpoint in WSO2 Identity Server Allows User Account Discovery (CVSS 5.3)