Unknown Login with phone number

• CVE-2022-0598 Unrated Login with phone number < 1.3.8 - Multiple Admin+ Stored XSS 0.7%
• CVE-2022-0593 Unrated Login with phone number < 1.3.7 - Unauthenticated remote plugin deletion 1.4%