CVE-2024-32832: WordPress Login with Phone Number plugin <= 1.6.93 - Broken Access Control vulnerability
Published Aug 31, 2025
·Updated
Missing Authorization vulnerability in Hamid Alinia Login with phone number login-with-phone-number.This issue affects Login with phone number: from n/a through <= 1.6.93.
Affected Software
1 affected component
Hamid Alinia Login with Phone Number<=1.6.93
Remediation
Information
Update the WordPress Login with phone number plugin to the latest available version (at least 1.6.94).
Event History
Aug 31, 2025
CVE Published
via MITRE·03:47 AM
Data Sourced
via MITRE·03:47 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-32832?
CVE-2024-32832 is considered a critical vulnerability due to its impact on authorization control.
2
How do I fix CVE-2024-32832?
To fix CVE-2024-32832, update the Hamid Alinia Login with Phone Number plugin to the latest version that addresses the vulnerability.
3
What versions are affected by CVE-2024-32832?
CVE-2024-32832 affects versions of the Hamid Alinia Login with Phone Number plugin up to and including 1.6.93.
4
What functionality is impacted by CVE-2024-32832?
CVE-2024-32832 impacts the login functionality via phone number, leading to potential unauthorized access.
5
Is CVE-2024-32832 applicable to WordPress?
Yes, CVE-2024-32832 is also applicable to the WordPress version of the Login with Phone Number plugin up to version 1.6.93.