Extension WordPress
Vulnérabilités OTP-less one tap Sign in
Cette page rassemble les failles publiées pour OTP-less one tap Sign in, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de OTP-less one tap Sign in
2 fiches
OTP-less one tap Sign in 2.0.14 – 2.0.59 – Unauthenticated Arbitrary Email Update to Account Takeover/Privilege Escalation
The OTP-less one tap Sign in plugin for WordPress is vulnerable to privilege escalation via account takeover in versions 2.0.14 to 2.0.59. This is due to the plugin not properly validating a user's identity prior to updating their…
2.0.14-2.0.59
Non indiqué
01/05/2025
OTP-less one tap Sign in <= 2.0.58 – Reflected Cross-Site Scripting
The OTP-less one tap Sign in plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 2.0.58 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to…
*-2.0.58
2.0.59
14/04/2025
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.