← WordPress Vulnerabilities
WordPress security by component

OTP Login Woocommerce & Gravity Forms

OTP Login Woocommerce & Gravity Forms is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published May 17, 2023; the highest CVE/CNA score is 8.1.

Plugin slug: mobile-login-woocommerce

CVE-2023-2706: OTP Login Woocommerce & Gravity Forms: Privilege escalation or authentication bypass

OTP Login Woocommerce & Gravity Forms is affected by privilege escalation or authentication bypass. The vulnerable path is reachable without authentication. A successful request can grant permissions or access that the caller should not possess.

PublishedMay 17, 2023
Safe version guidanceSee mitigation notes
Safe version
May 17, 2023 CVE-2023-2706
OTP Login Woocommerce & Gravity Forms: Privilege escalation or authentication bypass
OTP Login Woocommerce & Gravity Forms is affected by privilege escalation or authentication bypass. The vulnerable path is reachable without authentication. A successful request can grant permissions or access that the caller should not possess.
See mitigation notes
CVE8.1
NVD8.1