https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-18T14:44:37.084703+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-110135 CVE-2026-110135 — OTP Login & Register Woocommerce < 2.7.3 - Unauthenticated Account Takeover via OTP Brute Force 2026-10-18T14:44:37.085502+00:00

Affected: Unknown OTP Login & Register Woocommerce

The OTP Login & Register Woocommerce WordPress plugin before 2.7.3 does not adequately limit one-time-password verification attempts, because the attempt limit is tracked against a value the client itself supplies and can change freely, allowing an unauthenticated attacker to bypass the limit and brute-force the short numeric login code to take over an account without its password.