CVE-2026-14561

creationtimestamp| type| source ---|---|--- 2026-08-01 07:30:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mryx5qayy72o 2026-08-01 14:57:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzq4bs6742i 2026-08-01 14:57:23+00:00| seen|...

CVE-2026-14561 Authora - Easy Login with Mobile Number < 1.7.7 - Unauthenticated Account Takeover via OTP Disclosure

The Authora : Easy login with mobile number WordPress plugin before 1.7.7 does not keep its one-time login code confidential, returning the code and a valid verification token in the response of an unauthenticated action, allowing unauthenticated attackers to log in as any user whose registered...