Gglboy

Products

Exploited and recent CVEs

• CVE-2026-3655 Critical 9.8 OTP Login With Phone Number, OTP Verification <= 1.8.60 - Unauthenticated Authentication Bypass via Firebase OTP Verification 0.5%
• CVE-2025-8342 High 8.1 WooCommerce OTP Login With Phone Number, OTP Verification <= 1.8.47 - Authentication Bypass 0.7%
• CVE-2024-6482 High 8.8 Login with phone number <= 1.7.49 - Authenticated (Subscriber+) Authorization Bypass to Privilege Escalation 0.5%
• CVE-2024-6125 High 8.1 Login with phone number <= 1.7.34 - Insecure Password Reset Mechanism 0.5%
• CVE-2024-5150 Critical 9.8 Login with phone number <= 1.7.26 - Authentication Bypass due to Missing Empty Value Check 0.8%
• CVE-2023-4916 High 8.8 Login with phone number <= 1.5.6 - Cross-Site Request Forgery to User Password Change 0.4%