Skip to content
OpenAdvisories

Vendor

india-web-developer

4 known vulnerabilities.

Products

Login with OTP 2 WP Youtube Gallery 1 SEO Manager 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-8760

    Login with OTP <= 1.6 - Unauthenticated Authentication Bypass via OTP Brute Force

    The Login with OTP plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.6. This is due to an incomplete fix for CVE-2024-11178: the rate-limit/lockout check added to `otpl_login_action()` was placed only inside t…

    india-web-developer Login with OTP Web / CMS