CVE-2026-110373: WordPress Login with phone number plugin <= 1.8.77 - Privilege Escalation vulnerability
Incorrect Privilege Assignment vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Privilege Escalation.This issue affects Login with phone number: from n/a through 1.8.77.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Login with phone numberto a version that resolves this vulnerability.Fixed in 1.8.78
Event History
Frequently Asked Questions
Which installations are affected?
The affected product is Hamid Alinia's Login with Phone Number plugin for WordPress. Versions through 1.8.77 are affected; the available data does not identify a fixed version.
Can this be exploited remotely without an existing account?
The vector is network-based and the vulnerability is rated as requiring no privileges and no user interaction. Exploitation has high attack complexity, so additional unspecified conditions are required.
What is the potential impact of successful exploitation?
Successful exploitation can result in privilege escalation. The supplied CVSS vector indicates high potential impact to confidentiality, integrity, and availability.