cbcvebase.

Thedrifted Otp-Less One Tap Sign In vulnerabilities

1 known vulnerability affecting thedrifted/otp-less_one_tap_sign_in.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2025-3746P2CRITICALCVSS 9.8≥ 2.0.14, ≤ 2.0.592025-05-02
CVE-2025-3746 [CRITICAL] CWE-862 CVE-2025-3746: The OTP-less one tap Sign in plugin for WordPress is vulnerable to privilege escalation via account The OTP-less one tap Sign in plugin for WordPress is vulnerable to privilege escalation via account takeover in versions 2.0.14 to 2.0.59. This is due to the plugin not properly validating a user's identity prior to updating their details, like email. This makes it possible for unauthenticated attackers to change arbitrary users' email addresses, inc
nvd
Thedrifted Otp-Less One Tap Sign In vulnerabilities | cvebase