8.8
Élevée
CVE-2023-23492 The Login with Phone Number WordPress Plugin, version < 1.4.2, is affected by an authenticated SQL injection…
Description
The Login with Phone Number WordPress Plugin, version < 1.4.2, is affected by an authenticated SQL injection vulnerability in the 'ID' parameter of its 'lwp_forgot_password' action.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Login with Phone Number WordPress Plugin 1.4 | premières → < 1.4.2 | 1.4.2 |