41554 blogs · 4,644,446 posts Claim your blog

Record · corpus.blog/posts/01a08784-d604-7300-b1d7-c5c039f9bf36

CVE-2026-3655: Unauthenticated Auth Bypass in OTP Login Plugin (CVSS 9.8)

hurayraiit.com · published 1 June 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at hurayraiit.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 8
Words captured: 1,404

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://wordpress.org/plugins/login-with-phone-number/

wordpress.org

https://www.cve.org/CVERecord?id=CVE-2026-3655

cve.org

https://downloads.wordpress.org/plugin/login-with-phone-number.1.8.60.zip

downloads.wordpress.org

https://downloads.wordpress.org/plugin/login-with-phone-number.1.8.61.zip

downloads.wordpress.org

https://www.wordfence.com/threat-intel/vulnerabilities/researchers/lucky-buddy

wordfence.com

https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/login-with-phone-number/otp-login-with-phone-number-otp-verification-1860-unauthenticated-authentication-bypass-via-firebase-otp-verification

wordfence.com

https://plugins.trac.wordpress.org/browser/login-with-phone-number/tags/1.8.60/inc/ajax-handlers.php

plugins.trac.wordpress.org

https://plugins.trac.wordpress.org/changeset/3479314/login-with-phone-number/trunk/inc/ajax-handlers.php?old=3455810&old_path=login-with-phone-number%2Ftrunk%2Finc%2Fajax-handlers.php

plugins.trac.wordpress.org