CVE-2024-32507: falha de alta gravidade em Hamid Alinia Login with phone number
WordPress Login with phone number plugin <= 1.7.16 - Privilege Escalation vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
63Vexday Risk Score
Priorize a correção. Ela exploração observada na prática e tem prova de conceito pública.
ssvc Actcvss 8.8epss 0.5%
da publicação à arma883 dias
Publicada no NVD17 de mai.
1ª PoC+883d
Exploração observada15 de abr.
Incorrect Privilege Assignment vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Privilege Escalation.This issue affects Login with phone number: from n/a through 1.7.16.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Hamid Alinia · Login with phone numberCVEs relacionadas — Hamid Alinia Login with phone number
No mesmo produto, das mais perigosas para as menos.
CVE-2026-65570HIGHWordPress Login with phone number plugin <= 1.8.70 - Bypass vulnerability vulnerabilityEPSS 0.4%CVE-2024-34371MEDIUMWordPress Login with phone number plugin <= 1.7.18 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2024-32832CRITICALWordPress Login with Phone Number plugin <= 1.6.93 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2026-115967HIGHWordPress Login with phone number plugin <= 1.8.78 - Broken Authentication vulnerabilityEPSS 0.4%CVE-2026-110373HIGHWordPress Login with phone number plugin <= 1.8.77 - Privilege Escalation vulnerabilityEPSS 0.3%CVE-2024-31424HIGHWordPress Login with Phone Number plugin <= 1.6.93 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.3%
Referências
https://patchstack.com/database/vulnerability/login-with-phone-number/wordpress-login-with-phone-number-plugin-1-7-16-privilege-escalation-vulnerability?_s_id=cvehttps://patchstack.com/database/wordpress/plugin/login-with-phone-number/vulnerability/wordpress-login-with-phone-number-plugin-1-7-16-privilege-escalation-vulnerability?_s_id=cve