Vulnerabilities

TI-2025-42507 CVE-2025-69052 · GHSA-35j2-xmwj-f25h

Missing authorization in FmeAddons Registration & Login with Mobile Phone Number for…

MEDIUM 49

Missing Authorization vulnerability in FmeAddons Registration & Login with Mobile Phone Number for WooCommerce registration-login-with-mobile-phone-number allows Exploiting Incorrectly Configured Access Control Security…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00393 Published 2026-01-22 No fix listed CWE-862

TI-2025-09611 CVE-2025-10484 · GHSA-5x2v-mrh5-prvx

Registration & Login with Mobile Phone Number for WooCommerce <= 1.3.1 - Authentication Bypass

MEDIUM 49

The Registration & Login with Mobile Phone Number for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.3.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00451 Published 2026-01-17 No fix listed CWE-288

TI-2025-09450 CVE-2025-10300 · GHSA-h59x-q9rm-pvpp

TopBar <= 1.0.0 - Cross-Site Request Forgery to Settings Update

LOW 19

The TopBar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.0.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00167 Published 2025-10-15 No fix listed CWE-352

TI-2022-22161 CVE-2022-45070 · GHSA-h93q-2r3q-c596

WordPress Conditional Checkout Fields for WooCommerce plugin <= 1.2.3 - Broken Authentication vulnerability

LOW 25

Missing Authorization vulnerability in FmeAddons Conditional Checkout Fields for WooCommerce.This issue affects Conditional Checkout Fields for WooCommerce: from n/a through 1.2.3.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00542 Published 2024-05-17 No fix listed CWE-862

Vulnerabilities

Filters

Missing authorization in FmeAddons Registration & Login with Mobile Phone Number for…

Registration & Login with Mobile Phone Number for WooCommerce <= 1.3.1 - Authentication Bypass

TopBar <= 1.0.0 - Cross-Site Request Forgery to Settings Update

WordPress Conditional Checkout Fields for WooCommerce plugin <= 1.2.3 - Broken Authentication vulnerability