CVE-2024-37429

Description

References

• patchstack.com/database/Wordpress/Plugin/login-with-phone-number/vulnerability/wordpress-login-with-phone-number-plugin-1-7-35-admin-cross-site-scripting-xss-vulnerability
• patchstack.com/database/vulnerability/login-with-phone-number/wordpress-login-with-phone-number-plugin-1-7-35-admin-cross-site-scripting-xss-vulnerability · Third Party Advisory

More vulnerabilities in login with phone number

• CVE-2024-6482HIGH 8.8The Login with phone number plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.7.49. This is…
• CVE-2023-4916HIGH 8.8The Login with phone number plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5.6. This i…
• CVE-2023-23492HIGH 8.8The Login with Phone Number WordPress Plugin, version < 1.4.2, is affected by an authenticated SQL injection vulnerability in the 'ID' param…
• CVE-2022-0598MEDIUM 4.8The Login with phone number WordPress plugin before 1.3.8 does not sanitise and escape plugin settings which could allow high privilege user…
• CVE-2022-0593MEDIUM 6.5The Login with phone number WordPress plugin before 1.3.7 includes a file delete.php with no form of authentication or authorization checks …