Software intelligence
Important: Login With Phone Number appearing in this catalog does not mean your website is affected. Exposure depends on your installed version. How SiteRespond intelligence works
Tracked advisories
15
Latest advisory
6 August 2026
CISA KEV matches
0
In this WordPress feed
WordPress slug
login-with-phone-number
Plugin
This catalog lists 15 known advisories affecting Login With Phone Number. The most recent was published on 6 August 2026. If you use this software, compare your installed version against the affected ranges on each advisory and update to a fixed release outside those ranges. SiteRespond Defence checks your actual installed version when the plugin is connected — listing here does not by itself mean your site is vulnerable.
OTP Login With Phone Number, OTP Verification <= 1.8.70 - OTP Brute Force
This advisory describes a other issue in the affected software. Review the source advisory and your installed version to assess exposure.
Published 6 August 2026
OTP Login With Phone Number, OTP Verification <= 1.8.60 - Unauthenticated Authentication Bypass via Firebase OTP Verification
May allow access to accounts or admin areas without valid credentials.
Published 28 May 2026
WooCommerce OTP Login With Phone Number, OTP Verification <= 1.8.47 - Authentication Bypass
May allow access to accounts or admin areas without valid credentials.
Published 14 August 2025
Known Login With Phone Number advisories published by month.
CVE-2026-65570 · Published 6 August 2026
Affected versions: ≤ 1.8.70
CVE-2026-3655 · Published 28 May 2026
Affected versions: ≥ 1.8.50 and ≤ 1.8.60
CVE-2025-8342 · Published 14 August 2025
Affected versions: ≤ 1.8.47
CVE-2024-6482 · Published 14 September 2024
Affected versions: ≤ 1.7.49
CVE-2024-37429 · Published 28 June 2024
Affected versions: ≤ 1.7.35
CVE-2024-6125 · Published 18 June 2024
Affected versions: ≤ 1.7.34
CVE-2024-5150 · Published 28 May 2024
Affected versions: ≤ 1.7.26
CVE-2024-34371 · Published 3 May 2024
Affected versions: ≤ 1.7.18
CVE-2024-32832 · Published 22 April 2024
Affected versions: ≤ 1.6.93
CVE-2024-32507 · Published 15 April 2024
Affected versions: ≤ 1.7.16
CVE-2024-31424 · Published 10 April 2024
Affected versions: ≤ 1.6.93
CVE-2023-4916 · Published 12 September 2023
Affected versions: ≤ 1.5.6
CVE-2023-23492 · Published 12 January 2023
Affected versions: < 1.4.2
CVE-2022-0598 · Published 5 July 2022
Affected versions: ≤ 1.3.7
CVE-2022-0593 · Published 16 February 2022
Affected versions: < 1.3.7
SiteRespond Defence matches your installed Login With Phone Number version against this catalog when the Defence plugin is connected to your WordPress site.