Idehweb Login_with_phone_number
6 CVEs affecting Idehweb Login_with_phone_number. Latest disclosed: 2024-09-14. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-6482 | High | 8.8 | 2024-09-14 | The Login with phone number plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.7.49. This is due to a lack of v… |
CVE-2023-4916 | High | 8.8 | 2023-09-13 | The Login with phone number plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5.6. This is due to missing no… |
CVE-2023-23492 | High | 8.8 | 2023-01-20 | The Login with Phone Number WordPress Plugin, version < 1.4.2, is affected by an authenticated SQL injection vulnerability in the 'ID' parameter of its 'lwp_fo… |
CVE-2022-0593 | Medium | 6.5 | 2022-03-14 | The Login with phone number WordPress plugin before 1.3.7 includes a file delete.php with no form of authentication or authorization checks placed in the plugi… |
CVE-2024-37429 | Medium | 5.9 | 2024-07-22 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hamid Alinia Login with phone number login-with-phone-num… |
CVE-2022-0598 | Medium | 4.8 | 2022-08-01 | The Login with phone number WordPress plugin before 1.3.8 does not sanitise and escape plugin settings which could allow high privilege users to perform Cross-… |