CVE-2025-7692CWE-288

Orion Login with SMS <= 1.0.5 - Authentication Bypass via Weak OTP

High · published July 22, 2025

CVSS v3.1
8.1
EPSS
1%
Percentile
44.4
In the wild
Unconfirmed
What it is

The Orion Login with SMS plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.5. This is due to the olws_handle_verify_phone() function not utilizing a strong enough OTP value, exposing the hash needed to generate the OTP value, and no restrictions on the number of attempts to submit the code. This makes it possible for unauthenticated attackers to log in as other users, including administrators, if they have access to their phone number.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00536 · 44.4th percentile
Weakness
CWE-288 · Authentication Bypass Using an Alternate Path or Channel
Published
2025-07-22T09:22Z
EPSS history
Timeline
  • 22 JUL 09:22Z
    Orion Login with SMS <= 1.0.5 - Authentication Bypass via Weak OTP
    cvelistv5