CVE-2026-115967: WordPress Login with phone number plugin <= 1.8.78 - Broken Authentication vulnerability
Published Oct 29, 2026
·Updated
Weak Authentication vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Authentication Abuse.This issue affects Login with phone number: from n/a through 1.8.78.
Affected Software
1 affected component
Hamid Alinia Login with Phone Number<=1.8.78
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
login-with-phone-numberto a version that resolves this vulnerability.Fixed in 1.8.79
Event History
Oct 29, 2026
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
Which installations are affected?
Hamid Alinia Login with Phone Number versions through 1.8.78 are affected. The affected-version range begins at an unspecified earlier version.
2
What level of attacker access is indicated by the severity data?
The CVSS vector indicates network-reachable exploitation with low privileges required and no user interaction required. Successful exploitation can affect confidentiality, integrity, and availability.