Critical
CVE-2026-65570
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 15
Reset filters
Critical
CVE-2026-3655
OTP Login With Phone Number, OTP Verification <= 1.8.60 - Unauthenticated Authentication Bypass via Firebase OTP Verification
High
CVE-2025-8342
WooCommerce OTP Login With Phone Number, OTP Verification <= 1.8.47 - Authentication Bypass
High
CVE-2024-6482
Login with phone number <= 1.7.49 - Authenticated (Subscriber+) Authorization Bypass to Privilege Escalation
Medium
CVE-2024-37429
Login with phone number <= 1.7.35 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2024-6125
Login with phone number <= 1.7.34 - Insecure Password Reset Mechanism
Critical
CVE-2024-5150
Login with phone number <= 1.7.26 - Authentication Bypass due to Missing Empty Value Check
Medium
CVE-2024-34371
Login with phone number <= 1.7.18 - Missing Authorization
Medium
CVE-2024-32832
Login with phone number <= 1.6.93 - Missing Authorization
High
CVE-2024-32507
Login with phone number <= 1.7.16 - Unauthorized Account Password Change to Privilege Escalation
Medium
CVE-2024-31424
Login with phone number <= 1.6.93 - Cross-Site Request Forgery
High
CVE-2023-4916
Login with phone number <= 1.5.6 - Cross-Site Request Forgery to User Password Change
Medium
CVE-2023-23492
Login with phone number <= 1.4.2 - Reflected Cross-Site Scripting
Medium
CVE-2022-0598
Login with phone number <= 1.3.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-0593
Login with phone number <= 1.3.6 - Unauthenticated Remote Plugin Deletion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.