CVE-2026-110374
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk8th percentile - higher than 8% of all known CVEs
Summary
The WordPress plugin 'Login with phone number' (versions up to 1.8.77) contains a missing authorization vulnerability that allows exploitation of incorrectly configured access control security levels.
Risk Assessment
An attacker could gain access to functions or data they are not authorized to use, potentially leading to unauthorized actions on the site.
Recommendation
Update the 'Login with phone number' plugin to the latest version that fixes this vulnerability.
Other vulnerabilities in Login with phone number
Original NVD description (English source)
Missing Authorization vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Login with phone number: from n/a through 1.8.77.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS