Live › vulnerability › CVE-2026-115967
The Login with phone number plugin by Hamid Alinia has a weak authentication flaw in versions through 1.8.78. The sources say it allows authentication abuse, which likely means an attacker can log in or bypass the login check without valid credentials.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 11:24 UTC. All times on this page are UTC.
Sites running the Login with phone number plugin at version 1.8.78 or earlier are the ones the sources describe. The sources do not say which login paths or settings are needed to trigger it. unknown
No product ranges from the sources yet.
1.8.78 are affected; the sources do not name a fixed version.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Weak Authentication vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Authentication Abuse.This issue affects Login with phone number: from n/a through 1.8.78.
This page as .md · .json · in your agent: get_signal("CVE-2026-115967")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.