Vulnerabilities / OTP Login With Phone Number, OTP Verification
OTP Login With Phone Number, OTP Verification vulnerabilities
Advisories WPSec published for OTP Login With Phone Number, OTP Verification. Other sources may list more. Its attack surface: OTP Login With Phone Number, OTP Verification on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-15 | WPSEC-2026-0988 | OTP Login With Phone Number, OTP Verification <= 1.8.77 - Unauthenticated Authentication Bypass via Firebase Phone Number Verification | High 8.1 | 1.8.78 |
| 2026-10-15 | WPSEC-2026-0987 | OTP Login With Phone Number, OTP Verification <= 1.8.77 - Authenticated (Subscriber+) Insecure Direct Object Reference to Email Address Takeover via Email Change | Medium 6.5 | 1.8.78 |
| 2026-10-10 | WPSEC-2026-0723 | OTP Login With Phone Number, OTP Verification <= 1.8.74 - Unauthenticated Authentication Bypass via OTP Brute Force | High 8.1 | 1.8.76 |
License: CC BY 4.0