Lucene search
+L

5271 matches found

CNVD
CNVD
•added 2025/09/02 12:00 a.m.•20 views

WordPress Login with phone number plugin missing authorization vulnerability

WordPress Login with phone number plugin is a plugin for implementing cell phone verification code login, support WordPress and WooCommerce platform, users can be authenticated by cell phone SMS or WhatsApp. The WordPress Login with phone number plugin suffers from a lack of authorization...

9.8CVSS6.9AI score0.0036EPSS
SaveExploits0References1
NVD
NVD
•added 2025/08/31 4:15 a.m.•17 views

CVE-2024-32832

Missing Authorization vulnerability in Hamid Alinia Login with phone number login-with-phone-number.This issue affects Login with phone number: from n/a through = 1.6.93...

9.8CVSS0.0036EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/08/31 3:47 a.m.•2 views

CVE-2024-32832 WordPress Login with Phone Number plugin <= 1.6.93 - Broken Access Control vulnerability

Missing Authorization vulnerability in Hamid Alinia Login with phone number login-with-phone-number.This issue affects Login with phone number: from n/a through = 1.6.93...

9.8CVSS5.1AI score0.0036EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/08/31 3:47 a.m.•32 views

CVE-2024-32832 WordPress Login with Phone Number plugin <= 1.6.93 - Broken Access Control vulnerability

Missing Authorization vulnerability in Hamid Alinia Login with phone number login-with-phone-number.This issue affects Login with phone number: from n/a through = 1.6.93...

9.8CVSS0.0036EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/31 12:00 a.m.•7 views

CVE-2024-32832: Missing Authorization

Missing Authorization vulnerability in Hamid Alinia Login with phone number login-with-phone-number.This issue affects Login with phone number: from n/a through = 1.6.93...

9.8CVSS5.8AI score0.0036EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/08/31 12:00 a.m.•16 views

WordPress plugin Login with phone number 安全漏洞

WordPress Login with phone number plugin is a plugin for implementing cell phone verification code login, support WordPress and WooCommerce platform, users can be authenticated by cell phone SMS or WhatsApp. The WordPress Login with phone number plugin suffers from a lack of authorization...

9.8CVSS6.8AI score0.0036EPSS
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/28 7:36 a.m.•10 views

Malicious code in phone-feature-sdk2 (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
•added 2025/08/28 7:36 a.m.•7 views

MAL-2025-41592 Malicious code in phone-feature-sdk2 (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
•added 2025/08/28 7:36 a.m.•8 views

MAL-2025-41591 Malicious code in phone-feature-sdk (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/28 7:36 a.m.•9 views

Malicious code in phone-feature-sdk (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
CNNVD
CNNVD
•added 2025/08/28 12:00 a.m.•17 views

Asterisk 安全漏洞

Asterisk is an Asterisk open source software for PBX systems that runs on Linux and supports IP calls using SIP, IAX, and H323 protocols. Asterisk version 20.15.2 and versions prior to 22.5.2 have a security vulnerability that stems from the getauthorizationheader function returning NULL resultin...

7.5CVSS6.4AI score0.00408EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2025/08/27 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2022-22677

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A logic issue in the handling of concurrent media was addressed with improved state handling. This issue is fixed in macOS Monterey 12.4, iOS 15.5 and iPadOS...

4.3CVSS6AI score0.00689EPSS
SaveExploits0References2
The Hacker News
The Hacker News
•added 2025/08/26 5:23 p.m.•15 views

New Sni5Gect Attack Crashes Phones and Downgrades 5G to 4G without Rogue Base Station

A team of academics has devised a novel attack that can be used to downgrade a 5G connection to a lower generation without relying on a rogue base station gNB. The attack, per the ASSET Automated Systems SEcuriTy Research Group at the Singapore University of Technology and Design SUTD, relies on ...

7.5AI score
SaveExploits0
Wired Threat Level
Wired Threat Level
•added 2025/08/20 4:01 p.m.•18 views

Phone Searches at the US Border Hit a Record High

Customs and Border Protection agents searched nearly 15,000 devices from April through June of this year, a nearly 17 percent spike over the previous three-month high in 2022...

7.3AI score
SaveExploits0
HackRead
HackRead
•added 2025/08/19 4:54 p.m.•15 views

Australian ISP iiNet Reports Data Breach, Customer Accounts Stolen

Australian ISP iiNet confirms data breach as hackers stole 280,000 email accounts, phone numbers and user data using…...

7.3AI score
SaveExploits0
Malwarebytes
Malwarebytes
•added 2025/08/18 10:27 p.m.•23 views

How to spot the latest fake Gmail security alerts

Security alerts from tech companies are supposed to warn us when something might be amiss—but what if the alerts themselves are the risk? Scammers have long impersonated tech companies' security and support staff as a way to sniff out users' login credentials, and reports suggest that they're doi...

7.2AI score
SaveExploits0
Schneier on Security
Schneier on Security
•added 2025/08/18 11:02 a.m.•14 views

Eavesdropping on Phone Conversations Through Vibrations

Researchers have managed to eavesdrop on cell phone voice conversations by using radar to detect vibrations. It's more a proof of concept than anything else. The radar detector is only ten feet away, the setup is stylized, and accuracy is poor. But it's a start...

7.3AI score
SaveExploits0
NVD
NVD
•added 2025/08/15 3:15 a.m.•31 views

CVE-2025-8342

The WooCommerce OTP Login With Phone Number, OTP Verification plugin for WordPress is vulnerable to authentication bypass due to insufficient empty value checking in the lwpajaxregister function in all versions up to, and including, 1.8.47. This makes it possible for unauthenticated attackers to...

8.1CVSS0.00636EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/08/15 12:00 a.m.•22 views

PT-2025-33428 · WordPress · Woocommerce Otp Login With Phone Number

Name of the Vulnerable Software and Affected Versions: WooCommerce OTP Login With Phone Number, OTP Verification plugin for WordPress versions up to and including 1.8.47 Description: The WooCommerce OTP Login With Phone Number, OTP Verification plugin for WordPress is susceptible to authenticatio...

8.1CVSS6.9AI score0.00636EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/15 12:00 a.m.•4 views

CVE-2025-8342: Missing Authorization

The WooCommerce OTP Login With Phone Number, OTP Verification plugin for WordPress is vulnerable to authentication bypass due to insufficient empty value checking in the lwpajaxregister function in all versions up to, and including, 1.8.47. This makes it possible for unauthenticated attackers to...

8.1CVSS5.8AI score0.00636EPSS
SaveExploits0References1
Rows per page
Query Builder