https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-6482.htmlhttps://patchthecve.com/cve/CVE-2024-6482.htmlWed, 17 Jun 2026 08:18:06 +0000HIGH 8.8: The Login with phone number plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.7.49. This is due to a lack of validation and missing capability check on user-supplied data in the 'lwp_update_password_action' function. This makes it possible for authenthttps://patchthecve.com/cve/CVE-2024-37429.htmlhttps://patchthecve.com/cve/CVE-2024-37429.htmlWed, 17 Jun 2026 07:38:21 +0000MEDIUM 5.9: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hamid Alinia Login with phone number login-with-phone-number.This issue affects Login with phone number: from n/a through <= 1.7.35.https://patchthecve.com/cve/CVE-2023-4916.htmlhttps://patchthecve.com/cve/CVE-2023-4916.htmlWed, 17 Jun 2026 06:38:53 +0000HIGH 8.8: The Login with phone number plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5.6. This is due to missing nonce validation on the 'lwp_update_password_action' function. This makes it possible for unauthenticated attackers to change user password via