Beveiligingsadvies

CVE-2026-14561

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-01 06:00:13

Laatst bijgewerkt 2026-08-03 18:41:54

Toegewezen door WPScan

CVSS-score 6.5

Status PUBLISHED

Beschrijving

The Authora : Easy login with mobile number WordPress plugin before 1.7.7 does not keep its one-time login code confidential, returning the code and a valid verification token in the response of an unauthenticated action, allowing unauthenticated attackers to log in as any user whose registered mobile number they know (including administrators) or to create arbitrary accounts.

← Alle CVE's bekijken Bekijk op cve.org ↗