CVE-2022-0593

More information about this CVE will likely be available in a few days.

Description

The Login with phone number WordPress plugin before 1.3.7 includes a file delete.php with no form of authentication or authorization checks placed in the plugin directory, allowing unauthenticated user to remotely delete the plugin files leading to a potential Denial of Service situation.

Related CPE's

Could not find any relations

References

https://wordpress.org/plugins/login-with-phone-number

https://wpscan.com/vulnerability/76a50157-04b5-43e8-afbc-a6ddf6d1cba3

CvssV3 impact

Could not find any metrics

CvssV2 impact

Could not find any metrics
Created by Yello
About Severity.io