CVE-2024-32507

Incorrect Privilege Assignment vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Privilege Escalation.This issue affects Login with phone number: from n/a through 1.7.16.

Published:May 17, 2024

Last Modified:Oct 27, 2026

EPS:May 17, 2024

EPSS Score:0.00457

CVSS Score:8.8

Affected Products

No affected product recorded yet

Exploits

https://github.com/4minx/CVE-2024-32507

Common Weakness Enumeration

CWE-266 Incorrect Privilege Assignment

Common Attack Pattern Enumeration and Classification (CAPEC)

No CAPEC recorded yet

References

https://patchstack.com/database/wordpress/plugin/login-with-phone-number/vulnerability/wordpress-login-with-phone-number-plugin-1-7-16-privilege-escalation-vulnerability?_s_id=cve

https://patchstack.com/database/vulnerability/login-with-phone-number/wordpress-login-with-phone-number-plugin-1-7-16-privilege-escalation-vulnerability?_s_id=cve

Common Vulnerability Scoring System

Attack Vector

Network

Adjacent

Local

Physical

Privileges Required

None

Low

High

User Interaction

None

Required

Scope

Unchanged

Changed

Confidentiality

None

Low

High

Integrity

None

Low

High

Availability

None

Low

High