Authentication-Abuse - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/tags/authentication-abuse/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 29 Oct 2026 13:21:01 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgHamid Alinia Login with phone number: Authentication abuse (CVE-2026-115967)https://feed.craftedsignal.io/briefs/2026-10-login-phone-auth/Thu, 29 Oct 2026 13:21:01 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-login-phone-auth/The Login with phone number plugin for WordPress is vulnerable to authentication abuse due to weak authentication mechanisms, affecting versions up to and including 1.8.78.CVE-2026-115967 identifies a weak authentication vulnerability in the Hamid Alinia 'Login with phone number' WordPress plugin. This flaw allows unauthorized actors to perform authentication abuse. The vulnerability is confirmed to affect all versions of the plugin from inception through 1.8.78. No specific remediation version or patch announcement is currently detailed in the vulnerability disclosure.

Impact

The vulnerability is rated with a CVSS v3.1 base score of 8.8, indicating a high potential for unauthorized access to affected WordPress instances.

Recommendation

  • Audit WordPress instances to determine if the 'Login with phone number' plugin is installed and running version 1.8.78 or earlier.
  • Disable or remove the plugin until a security patch is provided by the developer.
  • Monitor WordPress authentication logs for suspicious activity or anomalous login attempts involving phone-based authentication workflows.
]]>highadvisorywordpresspluginauthentication-abusecve-2026-115967