CVE-2026-65570: WordPress Login with phone number plugin <= 1.8.70 - Bypass vulnerability vulnerability

Published Aug 6, 2026

Updated

Unauthenticated Bypass Vulnerability in Login with phone number <= 1.8.70 versions.

Affected Software

1 affected component

WordPress Login with phone number plugin<=1.8.70

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress Login with phone number Plugin to a version that resolves this vulnerability.
Fixed in 1.8.71

Aug 6, 2026

CVE Published

via MITRE·02:27 PM

Data Sourced

via MITRE·02:27 PM

RemedyDescriptionSeverityWeakness

The severity of CVE-2026-65570 is high, rated at 8.1 on the CVSS scale.

To fix CVE-2026-65570, update the WordPress Login with Phone Number plugin to version 1.8.71 or higher.

CVE-2026-65570 is categorized as an unauthenticated bypass vulnerability.

The impact of CVE-2026-65570 includes potential unauthorized access to accounts due to the bypass nature of the vulnerability.

CVE-2026-65570 affects the Login with Phone Number plugin for WordPress, specifically versions up to 1.8.70.