Live › vulnerability › CVE-2026-110373
Go to dashboardThe Login with phone number plugin for WordPress, by Hamid Alinia, assigns privileges incorrectly, so a user can gain higher access than intended. An attacker who can register or log in gets elevated rights on the site.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Sites running the Login with phone number plugin at version or earlier are affected. The sources do not say which login or registration paths are required to trigger it, so treat any site with the plugin active as exposed. Sites without this plugin can skip it.
1.8.77No product ranges from the sources yet.
wp plugin get login-with-phone-number --field=version with WP-CLI1.8.77, if the vendor has released one (unknown from the sources)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Incorrect Privilege Assignment vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Privilege Escalation.This issue affects Login with phone number: from n/a through 1.8.77.
This page as .md · .json · in your agent: get_signal("CVE-2026-110373")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.