Skip to content
OpenAdvisories

Vendor

gsayed786

2 known vulnerabilities.

Products

Orion SMS OTP Verification. 1 Orion Login with SMS 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2025-9967 Public exploit

    Orion SMS OTP Verification <= 1.1.7 - Authentication Bypass via Account Takeover

    The Orion SMS OTP Verification plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.1.7. This is due to the plugin not properly validating a user's identity prior to updating their password. T…

    gsayed786 Orion SMS OTP Verification. Web / CMS