CVE-2023-23492 (published 2023-01-20T00:00:00)
The Login with Phone Number WordPress Plugin, version < 1.4.2, is affected by an authenticated SQL injection vulnerability in the 'ID' parameter of its 'lwp_forgot_password' action.
Affected products: Vendor: n/a
Product: Login with Phone Number WordPress Plugin
Versions: < 1.4.2