plugin

Authentication Via Otp Using Firebase Vulnerabilities

1 known security issue reported for the Authentication Via Otp Using Firebase WordPress plugin. Most recent disclosed Dec 11, 2024.

1 critical

Running Authentication Via Otp Using Firebase on your site? Check whether your installed version is affected.

Scan your site free

Firebase OTP Authentication <= 1.0.1 - Missing Authorization to Privilege Escalation

critical

The Firebase OTP Authentication plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.0.1. This makes it possible for unauthenticated attackers to elevate their privilege level and gain access to administrator accounts.

CVSS:
9.8
Affected:
up to 1.0.1
Fix:
No patched version reported
Disclosed:
Dec 11, 2024

CVE-2024-54294 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database