8.8
High
CVE-2023-23492 The Login with Phone Number WordPress Plugin, version < 1.4.2, is affected by an authenticated SQL injection…
Description
The Login with Phone Number WordPress Plugin, version < 1.4.2, is affected by an authenticated SQL injection vulnerability in the 'ID' parameter of its 'lwp_forgot_password' action.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Login with Phone Number WordPress Plugin 1.4 | earliest → < 1.4.2 | 1.4.2 |