Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
WordPress Plugin Login with phone number Security Bypass - CVE-2024-5150 - Vulnerability Database
WP Plugin Login With Phone Number

WordPress Plugin Login with phone number Security Bypass - CVE-2024-5150

Critical
Reference: CVE-2024-5150
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2024-5150
Title: WordPress Plugin Login with phone number Security Bypass
Overview:

WordPress Plugin Login with phone number is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently log in as any existing user on the site such as an administrator if they have access to the user email. WordPress Plugin Login with phone number version 1.7.26 is vulnerable prior versions may also be affected.