Hamid Alinia Vulnerabilities and Affected Products
Vulnerabilities associated with Login with phone number.
Products
Clear product- Login with phone number6 vulnerabilities
- idehweb Login With Phone Number1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2026-65570HIGH | WordPress Login with phone number plugin <= 1.8.70 - Bypass vulnerability vulnerabilityUnauthenticated Bypass Vulnerability in Login with phone number <= 1.8.70 versions. CWE-290Aug 6, 2026 | CVSS8.1v3.1 | EPSS0.234% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-32832CRITICAL | WordPress Login with Phone Number plugin <= 1.6.93 - Broken Access Control vulnerabilityMissing Authorization vulnerability in Hamid Alinia Login with phone number login-with-phone-number.This issue affects Login with phone number: from n/a through <= 1.6.93. CWE-862Aug 31, 2025 | CVSS9.8v3.1 | EPSS0.363% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-37429MEDIUM | WordPress Login with phone number plugin <= 1.7.35 - Admin+ Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hamid Alinia Login with phone number login-with-phone-number.This issue affects Login with phone number: from n/a through <= 1.7.35. CWE-79Jul 22, 2024 | CVSS5.9v3.1 | EPSS0.263% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-32507HIGH | WordPress Login with phone number plugin <= 1.7.16 - Privilege Escalation vulnerabilityIncorrect Privilege Assignment vulnerability in Hamid Alinia Login with phone number login-with-phone-number.This issue affects Login with phone number: from n/a through <= 1.7.16. | CVSS8.8v3.1 | EPSS0.461% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-34371MEDIUM | WordPress Login with phone number plugin <= 1.7.18 - Broken Access Control vulnerabilityMissing Authorization vulnerability in Hamid Alinia Login with phone number login-with-phone-number.This issue affects Login with phone number: from n/a through <= 1.7.18. CWE-862May 6, 2024 | CVSS4.3v3.1 | EPSS0.396% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-31424HIGH | WordPress Login with Phone Number plugin <= 1.6.93 - Cross Site Request Forgery (CSRF) vulnerabilityCross-Site Request Forgery (CSRF) vulnerability in Hamid Alinia Login with phone number login-with-phone-number.This issue affects Login with phone number: from n/a through <= 1.6.93. CWE-352Apr 15, 2024 | CVSS8.8v3.1 | EPSS0.31% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |