Skip to content
Threat Feed
Subscribe
high advisory

Hamid Alinia Login with phone number: Authentication abuse (CVE-2026-115967)

The Login with phone number plugin for WordPress is vulnerable to authentication abuse due to weak authentication mechanisms, affecting versions up to and including 1.8.78.

CVE search metadata

CVE search record: CVE-2026-115967. Severity: high. CVSS: 8.8. KEV: no. Product: Login with phone number (<= 1.8.78). Brief: Hamid Alinia Login with phone number: Authentication abuse (CVE-2026-115967). Brief link: https://feed.craftedsignal.io/briefs/2026-10-login-phone-auth/

Triage facts

Revision 1
Applicability
Login with phone number (<= 1.8.78)
Evidence
Unknown
Severity
High
Action
Elevated
Sources
1 public source
Freshness
Revision 1Oct 29, 13:21 UTC
Vulnerabilities
1 CVE
Source quality
A1Likely

CVE-2026-115967 identifies a weak authentication vulnerability in the Hamid Alinia 'Login with phone number' WordPress plugin. This flaw allows unauthorized actors to perform authentication abuse. The vulnerability is confirmed to affect all versions of the plugin from inception through 1.8.78. No specific remediation version or patch announcement is currently detailed in the vulnerability disclosure.

Impact

The vulnerability is rated with a CVSS v3.1 base score of 8.8, indicating a high potential for unauthorized access to affected WordPress instances.

Recommendation

  • Audit WordPress instances to determine if the 'Login with phone number' plugin is installed and running version 1.8.78 or earlier.
  • Disable or remove the plugin until a security patch is provided by the developer.
  • Monitor WordPress authentication logs for suspicious activity or anomalous login attempts involving phone-based authentication workflows.

Immediate actions

Inventory all WordPress installations and identify versions of Login with phone number

IT Operations 24h

Threat Hunt

Identify abnormal authentication patterns within WordPress access logs related to phone verification endpoints

T1550 medium medium confidence hunt now

Data: Web access logs (access.log)

Mitigations

Disable or uninstall Login with phone number plugin

immediate IT Operations

CVE-2026-115967