CVE-2025-8342

CVE-2025-8342 concerns the WooCommerce OTP Login With Phone Number, OTP Verification plugin for WordPress. Affected versions up to 1.8.47 allow unauthenticated attackers to bypass OTP verification via faulty empty-value checks in lwp_ajax_register and exploit Firebase API error handling when the ...

CVE-2025-8342 WooCommerce OTP Login With Phone Number, OTP Verification <= 1.8.47 - Authentication Bypass

The WooCommerce OTP Login With Phone Number, OTP Verification plugin for WordPress is vulnerable to authentication bypass due to insufficient empty value checking in the lwpajaxregister function in all versions up to, and including, 1.8.47. This makes it possible for unauthenticated attackers to...

PT-2025-33428 · WordPress · Woocommerce Otp Login With Phone Number

Name of the Vulnerable Software and Affected Versions: WooCommerce OTP Login With Phone Number, OTP Verification plugin for WordPress versions up to and including 1.8.47 Description: The WooCommerce OTP Login With Phone Number, OTP Verification plugin for WordPress is susceptible to authenticatio...

Malicious code in upload-file-to-firebase (npm)

The package upload-file-to-firebase was found to contain malicious code...

Malicious code in corvus-firebase-exobiology-callback (npm)

The package corvus-firebase-exobiology-callback was found to contain malicious code...

Malicious code in nebula-firebase-queue (npm)

The package nebula-firebase-queue was found to contain malicious code...

MAL-2025-20587 Malicious code in firebase-queue-client (npm)

The package firebase-queue-client was found to contain malicious code...

MAL-2025-26162 Malicious code in meissa-firebase-equinox-docusaurus (npm)

The package meissa-firebase-equinox-docusaurus was found to contain malicious code...

Malicious code in firebase-babel-apollo-dotenv-safe (npm)

The package firebase-babel-apollo-dotenv-safe was found to contain malicious code...

Malicious code in xenos-cosmicsilence-ichnology-firebase (npm)

The package xenos-cosmicsilence-ichnology-firebase was found to contain malicious code...

MAL-2025-31291 Malicious code in queue-firebase (npm)

The package queue-firebase was found to contain malicious code...

Malicious code in mailersend-firebase (npm)

The package mailersend-firebase was found to contain malicious code...

Malicious code in firebase-io-taurus-procyon (npm)

The package firebase-io-taurus-procyon was found to contain malicious code...

MAL-2025-14509 Malicious code in andromeda-child-process-local-firebase (npm)

The package andromeda-child-process-local-firebase was found to contain malicious code...

MAL-2025-17602 Malicious code in corvus-firebase-exobiology-callback (npm)

The package corvus-firebase-exobiology-callback was found to contain malicious code...

Malicious code in dotenv-safe-firebase-uninstall-innercore (npm)

The package dotenv-safe-firebase-uninstall-innercore was found to contain malicious code...

Malicious code in firebase-queue-client (npm)

The package firebase-queue-client was found to contain malicious code...

Malicious code in luminescence-hexo-firebase-kuiperbelt (npm)

The package luminescence-hexo-firebase-kuiperbelt was found to contain malicious code...

MAL-2025-25792 Malicious code in mailersend-firebase (npm)

The package mailersend-firebase was found to contain malicious code...

MAL-2025-37921 Malicious code in upload-file-to-firebase (npm)

The package upload-file-to-firebase was found to contain malicious code...