Recherche « Unknown Happy Coders OTP Login for WooCommerce »
1 CVE
Critique 1
Élevée 0
Moyenne 0
Faible 0
Non évaluée 0
Exploitées (KEV)
Tri : plus récentes
« Unknown Happy Coders OTP Login for WooCommerce » ✕
-
CVE-2026-12492 9.8 Critique
Unknown Happy Coders OTP Login for WooCommerce
The Happy Coders OTP Login for WooCommerce WordPress plugin before 2.8 does not verify that a one-time password was actually validated before authenticating a user based on a supplied identifier, allowing unauthenticated attackers to log in as any existing user, including administrators, as well as to create new accounts.