Lucene search

K
wpvulndbWpvulndbWPVDB-ID:189E74EC-A1E0-4A04-B299-97B4919CFC31
HistoryApr 29, 2024 - 12:00 a.m.

Login with phone number < 1.6.94 - Missing Authorization

2024-04-2900:00:00
wpscan.com
3
wordpress
plugin
vulnerability
unauthorized access
data

7 High

AI Score

Confidence

Low

0 Low

EPSS

Percentile

0.0%

Description The Login with phone number plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on a function in versions up to, and including, 1.6.93. This makes it possible for unauthenticated attackers to perform an unauthorized action.

CPENameOperatorVersion
eq1.6.94

7 High

AI Score

Confidence

Low

0 Low

EPSS

Percentile

0.0%

Related for WPVDB-ID:189E74EC-A1E0-4A04-B299-97B4919CFC31